researchers-legal

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md workflow explicitly instructs the agent to fetch and ingest public court documents from open third‑party sites (e.g., PACER, CourtListener, PlainSite, DOJ case pages and state court sites listed under "Where to Find Documents" and the discovery guide) and to read/quote those documents as part of its required deliverables, so untrusted external content can directly influence actions and outputs.