document-hunter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime path: the Playwright browser automation searches and extracts rendered DOM content from outsider-authored public web sources (e.g., DocumentCloud/CourtListener/Scribd/Justia pages and their document pages), which can include arbitrary free text from non-operating-user authors that the agent may ingest into the LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's RECAP setup explicitly downloads and installs a Chrome extension from https://github.com/freelawproject/recap-chrome/releases/download/2.8.6/chrome-release.zip (curl + unzip and auto-loaded into Chromium), which fetches and runs remote extension code used by the agent at runtime.