california-property-tax

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow fetches BOE Property Tax Rules PDFs and PTLG annotation pages from BOE URLs (public web content), which are outsider-authored free text that the agent will read and ingest into the LLM context during extraction/synthesis.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent at runtime to fetch BOE rule PDFs and PTLG annotation pages (e.g., https://boe.ca.gov/proptaxes/pdf/rules/Rule462_180.pdf and https://boe.ca.gov/lawguides/property/current/ptlg/annt/220-0000.html), and those remote documents are required runtime inputs that would directly control the agent's prompts/analysis.