state-law-tracker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md Monitoring Methodology and Workflows explicitly direct the agent to monitor and ingest public third‑party sources (e.g., the NCSL privacy database, IAPP state law tracker, state legislature bill tracking systems, and Attorney General announcements), which the agent is expected to read and use to update the tracker and drive compliance decisions, creating a clear avenue for indirect prompt injection.