law-to-markdown

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This URL points to a third‑party GitHub repository (a personal account) that the skill instructs users to install from — not an official vendor or package manager — so it could be used to distribute scripts/executables and should be reviewed before downloading or running.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 该 Skill 的运行时路径会读取用户提供的输入文件内容（main→_convert_txt/_convert_docx/_convert_pdf_pdfplumber 或 mineru-ocr 回传的 markdown→_run_stage2_stage3_pipeline→stage3_checker.run_stage3_checks 读取 stage1/stage2 文本并做结构校验），因此外部作者只要提交恶意“文件文本”即可被 LLM（或该链路）摄取。