gps-reviews

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md uses first-party “gps” package API calls (list/get/reply to reviews) via required runtime workflow but does not specify any outsider-authored free-text ingestion path beyond first-party content (review text returned by the provider’s own reviews API) and includes a rule to “Always get user approval before posting a reply,” with no evidence of monitoring/reading attacker-submitted feed/queue content.