free-geocoding-and-maps
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill directly fetches and parses results from the public OpenStreetMap Nominatim API (e.g., https://nominatim.openstreetmap.org/search and /reverse), which returns user-contributed/display_name and address JSON that the agent is expected to read and act on, so untrusted third-party content could materially influence its decisions.
Audit Metadata