legal-work-plugin

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The GitHub repository is under "anthropics" (not the known vendor "anthropic") which looks like a possible typosquat/impersonation and unknown GitHub accounts can host malicious code or install scripts, so it should be treated as high risk until verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime workflow for /review-contract and /triage-nda ingests the user-provided contract/NDA text (the “paste” content) into the agent’s LLM context; if that pasted text is authored by an outsider (e.g., vendor/customer terms), it becomes outsider free-form prose via the user’s input path.