alterlab-rma-abstract-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly directs the agent to "search the web for the target journal or conference abstract requirements" and to "read submission guidelines," meaning it will fetch and interpret open public web pages (journal/conference sites and other third-party pages) whose instructions directly determine formatting and drafting decisions and thus could enable indirect prompt injection.