opc-legal-counsel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly requires performing "官方检索 / 定向核验" (Step 4 and the "official检索 / 外部核验" step) and multiple domain files (e.g., references/ai-compliance.md) instruct the agent to "核验上游模型备案状态: 登录国家网信办官网", which clearly expects the agent to fetch and interpret open public third‑party sources (official websites/announcements) that can materially change legal recommendations.