maps

Warn

Audited by Snyk on Apr 22, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). This skill performs live queries to public, user-contributed services (OpenStreetMap/Nominatim and Overpass API, plus OSRM and TimeAPI.io) and directly parses untrusted OSM tags and routing/step text (name, opening_hours, website, maneuver/instruction data) which are consumed to generate directions and influence responses/decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 22, 2026, 01:59 AM
Issues
1