paper-read

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow fetches and extracts text from an outsider-provided PDF/arXiv link at runtime (e.g., curl + pdftotext in Phase 1), so the paper’s free-form body text is ingested into the agent’s LLM context.