arxiv

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested from public arXiv Atom XML at runtime via curl/urllib.request.urlopen to https://export.arxiv.org/api/query?..., where fields like <title> and <summary> (authored by external paper authors) are parsed and printed/used as LLM-readable text.