loc-catalog

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow queries loc.gov search and item endpoints on demand, so the agent reads titles, descriptions, and subjects from catalog records it selected through its own search; outsiders cannot force delivery into a feed the workflow monitors, though some digitized LOC collections carry public-contributed text.