assembly-bill-vote-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). assembly-bill-vote-search는 열린국회정보 Open API를 k-skill-proxy를 통해 호출해 의안 검색/상세/표결을 조회하며, LLM이 읽는 텍스트는 outsider가 직접 제출하는 자유텍스트 피드/큐가 아니라 공개 API 응답 데이터입니다(워크플로가 URL/특정 외부 콘텐츠를 임의로 “읽도록” 강제하지 않음).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's primary runtime instruction is to run "npx -y @nomadamas/k-skill@0 instruct ..." which fetches and executes remote code that controls the skill's instructions (fallback/source instructions linked at https://github.com/NomaDamas/k-skill/blob/main/assembly-bill-vote-search/instruction.md and https://github.com/NomaDamas/k-skill#readme).