zot-brainstorm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md’s required workflow ingests outsider-authored free text from Zotero item content at runtime (e.g., abstracts/notes/annotations/fulltext/children resolved via zot commands like item get, item note list/search, item annotation list, item fulltext/pdf), and those texts are authored by third parties rather than the operating user.