google-maps-leads

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent to navigate and scrape Google Maps search results and individual business websites (including user reviews and contact pages), which are public, user-generated/untrusted third-party sources that the agent must read and act on (clicking listings, following website links, extracting data), so those external contents can materially influence tool use and next actions.