fitness-finder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill makes runtime requests to the public Camino API (via scripts/fitness-finder.sh calling https://api.getcamino.ai/query), which returns results sourced from OpenStreetMap/public data (user-generated/untrusted) that the agent consumes and interprets, so it is exposed to untrusted third‑party content.