customs-trade-law-onur-kafkas

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s required runtime workflow for CROSS ruling research fetches full ruling text from CBP’s CROSS site (an outsider-authored source relative to the operating user) via web_fetch("https://rulings.cbp.gov/ruling/{RULING_ID}"), which is then ingested into the agent’s LLM context.