typst-paper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's bibliography verification workflow (references/CITATION_VERIFICATION.md) and the bibliography module explicitly instruct using public APIs and sites (Semantic Scholar, CrossRef/doi.org, arXiv, Exa MCP) to programmatically fetch and verify bibliographic records, so the agent will ingest open third‑party content that can change verification outcomes and subsequent actions.