review-contract

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md:12-15 and Step 1/4 describe accepting a “contract file or URL” and then “read the entire contract” (including pasted text), which at runtime would ingest outsider-authored contract text (from an uploaded/downloaded document or URL) into the LLM context for clause-by-clause analysis.