cdc-voucher-locator-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested via runtime HTTP fetches of public CDN JSON files (https://prd-tmp.cdn.gowhere.gov.sg/.../data.gzip and data_supermarket.json) and OneMap geocoding responses (https://www.onemap.gov.sg/api/common/elastic/search?...), whose name/address fields are treated as readable text and fed into the agent’s context through the script’s JSON output.