wk-cal

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path § Fetch Day Events in SKILL.md calls gcal.list_events(...) and then extracts free-text fields like Description / notes from events, meaning outsider-authored event content inserted by the event author/user can be ingested whenever the agent reads the calendar feed for scheduled events.