outside-counsel-billing-performance-reviewer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the “Required Intake”/analysis path, the skill ingests user-uploaded invoices, LEDES files, billing exports, OCGs, and narratives (outsider-authored free text included in those uploads) via the file inventory/normalization steps (and any extracted PDF text) without first selecting a specific item to sanitize, making indirect prompt-injection possible through uploaded document text.