subpoena-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's mandatory Step 0 ("研究适用规则") instructs the agent to perform legal research and explicitly references search connectors and "联网检索——需复核" / "[yuandian检索]" (network/search) results, so the agent will fetch and read open/public third‑party legal sources whose content can materially change deadlines, objections and next actions.