enrich-place-details

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill calls the public Dineway API (https://api.dineway.ai) to search and fetch place data (places, reviews, displayName, addresses, etc.), and it programmatically reads and scores those untrusted/public place results to select a placeId and drive subsequent actions (rebind shadow user, fetch details), so third-party content can materially influence behavior.