vibe-legal-batch-redliner

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is an unvetted, personal GitHub repository that the skill instructs you to clone and execute locally (python main.py / npm install), which is a common vector for distributing malicious code if the author or repo is not trusted.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required workflow sends the full text of each uploaded contract (outsider-authored client documents) to Google Gemini at runtime (“Upload DOCX → … Send to AI with playbook”), so the LLM context is fed with outsider free text (the contract body) via the AI request.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Setup instructs cloning and running remote code from https://github.com/sarturko-maker/vibe-legal-server (git clone ...; python main.py), which fetches and then executes external code the skill relies on at runtime.