find-nearby

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill directly queries OpenStreetMap endpoints (Overpass: overpass-api.de / overpass.kumi.systems and Nominatim: nominatim.openstreetmap.org) and ingests community-maintained place data (names, opening_hours, website, tags) which the agent reads and uses to decide/present results (including "open now" checks), so untrusted user-generated content could indirectly influence behavior.