geo-local-optimizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow (Step 2 "Audit current local presence") instructs the agent to check NAP consistency, map/listing profiles and reviews "based on the information and URLs provided by the user" and explicitly references public platforms (Google Maps, Apple Maps, Yelp, Tripadvisor), so the agent is expected to ingest and act on untrusted, user-generated third‑party content that can influence recommendations.