local-business-discovery-and-mapping

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The tool’s runtime workflow for nearby_search/text_search/geocode necessarily calls an external places/geocoding backend and ingests returned place/address text (e.g., names, formatted addresses) into the agent’s LLM context, which is effectively outsider-authored free text from third-party mapping data.