nyc-acris

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill queries and ingests public third‑party data from data.cityofnewyork.us (PLUTO and ACRIS endpoints shown in SKILL.md) and uses returned fields (document_ids, party names, ownername, etc.) to drive further queries and determine outputs, so external data from those public datasets could materially influence agent behavior.