carto-preview-builder-map

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill reads map metadata and content via the CARTO MCP server (read_maps, view_map), which accesses user-owned or shared maps and names/descriptions that could potentially be authored by other users sharing maps, representing an indirect injection source via search results or map loading.