restaurant-local-seo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow uses WebSearch(...) to fetch and analyze search results (e.g., “best [cuisine] near me [city]”), which can ingest outsider-authored free text from public web pages into the agent’s LLM context via the web browsing/search tool.