daily-paper-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs the agent to browse and extract content from public arXiv pages using Chrome MCP tools (see SKILL.md Step 1 and Step 2: "Search arXiv Using Chrome" and "Navigate to arXiv abs page and extract"), which exposes it to untrusted third-party content that the agent must read and that can influence selection and downstream actions.