gmaps

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). High: the required workflow navigates to Google Maps at runtime and uses CDP Runtime.evaluate to extract rendered page text (search result cards, directions panel text, and place-detail URL-derived fields) into the agent’s returned output/LLM context, which is outsider-authored free text from a public web page.