dineway-enrich-places

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow (scripts/enrich_place_details.js) takes outsider-provided --name and --city, sends them as textQuery to POST /api/places/search, and then ingests the returned candidate/place detail fields for matching and saving (so attacker-controlled free text is used to drive ingestion into the API responses).