note-juridique

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly requires fetching and reading public third-party legal sources (e.g., via code_article, juri_rechercher_complet / juri_get_decision, jorf_search) — notably Légifrance/jurisprudence/JORF — and uses those retrieved texts to substantively drive analysis and recommendations, so external content could materially influence the agent's decisions.