scienceclaw-retrieval

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly directs the agent to query and ingest results from public third‑party databases (PubMed, arXiv, Semantic Scholar, CrossRef, OpenAlex) and to perform citation chaining and relevance re‑ranking on those results, meaning untrusted external content is read and can materially influence follow‑up searches and actions.