mapkit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow depicted in SKILL.md uses Apple frameworks (e.g., MKLocalSearch/MKDirections/MKGeocodingRequest/CLGeocoder, CLGeocoder autocomplete delegates, and Look Around) but it does not define any ingestion path for outsider-authored free text delivered via a queue/feed/email/inbox/comment/ticket; any strings like naturalLanguageQuery, addressString, or queryFragment are treated as application/user-provided inputs selected by the app rather than automatically monitored outsider text.