local-search-ads

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly routes geogrid scans to the third‑party service "Local Falcon" (Tools for This Skill) and relies on Google Business Profile / Google Maps public data (reviews, photos, map-pack results) which the agent would read and interpret to make campaign decisions, exposing it to untrusted public content.