local-places

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill queries the public Google Places API (via the local proxy to https://places.googleapis.com) and ingests/displayes place data (names, addresses, ratings, websites, etc.) from public/third‑party sources as part of its normal workflow, which could include user‑generated/untrusted content.