geolocation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md "Web Search Verification" step (and the included references/verification-strategies.md) explicitly instructs the agent to perform web searches and interpret open/public search results and pages to verify and update geolocation hypotheses, so it ingests untrusted third‑party content that can change its decisions.