cn-thesis-references

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads user-provided thesis/citation inputs (e.g., Word DOCX content and pasted reference lists/metadata) as specified by static/core/workflow.md steps 2 and 8 and the scripts/apply_docx_references.py execution layer, which directly ingests outsider-authored free text at runtime.