shabbat-aware-scheduler

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches Shabbat times and holiday data from the public HebCal API (e.g., https://www.hebcal.com/shabbat and https://www.hebcal.com/hebcal) as described in SKILL.md and implemented in scripts/check_shabbat.py, and those third‑party responses are directly used to make scheduling and automation decisions.