congressional-disclosure-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent queries public congressional financial-disclosure filings via the Crawlora API, which indexes data created by third-party individuals (members of Congress and candidates).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill makes runtime calls to the Crawlora API at https://api.crawlora.net/api/v1 via a bundled helper script (scripts/crawlora.sh) to retrieve congressional disclosure filings and reports, representing a third-party commercial service dependency of common/reputable unofficial provenance.