goplaces

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The goplaces skill directly queries the public Google Places API (e.g., search/details with --reviews) and ingests/displayes user-generated place data and reviews from the open web as part of its normal workflow, which could contain instructions or content that materially influence subsequent actions.