ArXiv

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Runtime path: the workflows call public, outsider-authored sources—curl to https://export.arxiv.org/api/query (Atom XML containing arXiv paper titles/abstracts) and https://alphaxiv.org/overview/{PAPER_ID}.md / https://alphaxiv.org/abs/{PAPER_ID}.md (AI-generated markdown)—and then parse/insert that readable text into the agent’s response/LLM context.