academic-paper-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The required workflow ingests the manuscript text the operating user provides (manuscripts are the “source papers”), and those documents are outsider-authored; that prose then becomes LLM context via the “Read each paper fully and run both lenses… Record candidate findings” runtime path.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Typst template imports the external package "@preview/cetz:0.3.4" (see assets/cetz-charts.typ) which will be fetched at Typst/compile time and executes remote drawing code that the skill relies on to produce CeTZ charts.