alterlab-geomaster

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md and references explicitly show runtime workflows that search and load open/public data (e.g., pystac_client.Client.open("https://planetarycomputer.microsoft.com/api/stac/v1") in "Modern Cloud-Native Workflows", Earth Engine .getInfo(), Overpass/OSM requests, Sentinelsat downloads, and remote STAC/HTTP reads in references/data-sources), so the agent is clearly expected to ingest untrusted third‑party content (public catalogs, APIs, and user-generated OSM data) that can materially influence processing and tool actions.