paper-fraud-auditor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Required runtime path ingests outsider-authored free text when the user supplies a public URL to scripts/mineru_convert.py (MinerU fetches the page/PDF and returns extracted full.md/*_content_list.json), which scripts/build_evidence_ledger.py then reads and embeds into the agent’s LLM context via the generated evidence ledger/markdown lines.