law-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider source: the skill fetches full-text legal documents (e.g., court opinions) from external public APIs like CourtListener/Caselaw Access Project at runtime, and that retrieved prose (e.g., plain_text/html/full case text) is then available to the agent/LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The OpenContracts skill includes an installation step that runs "git clone https://github.com/Open-Source-Legal/OpenContracts.git" followed by "docker-compose up -d", which fetches remote code from that GitHub URL and executes it (remote code fetch+execute during setup/runtime).