maps

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In cmd_search, cmd_nearby (--near) and cmd_area, outsider-provided free-text is sent to first-party HTTP endpoints (Nominatim/Overpass/OSRM/TimeAPI), meaning the agent runtime ingests responses originating from outside the trusted provider and those responses can contain arbitrary place names/hours/addresses that are then returned/used.