literature-survey-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider free text is ingested via Phase 2 Agent C “Summary Extractor,” which reads search_*.json abstracts fetched from public APIs (OpenAlex/CrossRef/Semantic Scholar) and writes them into paper_summaries.md, which is then used by the drafting/review agents as LLM context.