eccc-jeanne-sulzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s required runtime workflow mandates web_fetch/retrieval to eccc.gov.kh and related Tier 1 domains specifically to verify case-specific ECCC documents, and it does not require ingesting arbitrary outsider-authored free text without selecting a specific document to fetch.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly requires runtime web_fetch to eccc.gov.kh (e.g. https://www.eccc.gov.kh/en/about/legal-framework and https://www.eccc.gov.kh/en/cases/case-002/trial-02) and to legal-tools.org to retrieve court documents that are then injected into the agent's context to verify and control its outputs, creating a runtime external dependency.