congressman-stock-watch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required workflow uses WebFetch at runtime to fetch public web content from Capitol Trades (e.g., https://www.capitoltrades.com/trades?...), then parses the returned trade table/JSON into LLM-readable text for ranking and proposal—this is outsider-authored free text from a third-party site.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill performs a runtime WebFetch of https://www.capitoltrades.com/trades?txType=buy&govBody=congress&orderBy=-txDate&pageSize=96 and uses the fetched trade data to drive which tickers the agent proposes (i.e., the external content directly controls the agent's outputs and is a required data dependency), so this external URL is a runtime dependency that influences prompts/decisions.