jp-law

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill queries the official e-Gov Law API V2 to search and retrieve Japanese statutory text and metadata. While the API serves authoritative legal texts rather than attacker-controlled user-generated content, it constitutes an external API ingestion path where statutory text (and potentially any upstream data) flows into the agent context.