2026-legal-research-agent
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to run Firecrawl scrapes and verify statute pages on open public sites (e.g., california.public.law, courts.ca.gov, state legislature URLs and news/CCRC pages), so the agent fetches and ingests third‑party public web content that can materially influence scraping configuration and downstream decisions.
Audit Metadata