search-stac

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow uses the user’s free-text input ($@) to construct parameters and then performs STAC collection listing/search/download via geoai.pc_collection_list(), geoai.pc_stac_search(...), and geoai.pc_stac_download(...) without selecting any specific pre-authored item first, so outsider-authored text can influence which catalog text/metadata the agent ingests.