pilot-service-agents-flights

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md describes runtime fetching from outsider-authored public aviation data sources (e.g., “Open ADS-B feeds (adsb.lol + ADSBdb)” and Aviation Weather Center METAR/TAF/AIRMETs/SIGMETs) whose returned free-text/prose is then used for Gemini /summary and “Free-text queries” in the agent’s LLM context.