legal-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The legal search agent workflow queries third-party legal databases (PKULaw and Yuandian) for statutes and court cases based on user prompts, which constitutes low-risk active searching of external content databases.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill references external MCP servers (such as yuandian-mcp-server via npx and https://apim-gateway.pkulaw.com/mcp-law-search-service), which constitute remote operational dependencies fetching code and services at runtime.