cukaimax-tax-authority

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s required workflow connects to the public CukaiMax Streamable HTTP MCP (https://www.cukaimax.com/.well-known/mcp) and then repeatedly calls search_tax_authority/get_tax_authority_release, but the outsider-authored risk from free text is low because these tool calls are driven by the user’s query and the runtime text ingested is expected to be vendor/MCP-provided tax authority content rather than arbitrary user-submitted documents.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The agent is configured to fetch runtime MCP content from https://www.cukaimax.com/.well-known/mcp which the skill uses as a required external source that directly informs and controls prompts/decisions.