israeli-public-transit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent skill queries the curlbus real-time transit arrival feed (https://curlbus.app/{stop_code}) where stop codes and returned arrival descriptions can contain outsider-influenced public transit schedule or stop metadata.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to query https://curlbus.app/<stop_code> at runtime to fetch arrival data and executes code that connects to curlbus.app, which is an unofficial third-party service, placing it at the medium provenance tier.