paperclip-pipeline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required Inputs ("Source material location or public links") and Phase descriptions (e.g., "01 Discovery: Search papers" and "02 Processing: Convert PDFs and documents into Markdown") explicitly require ingesting and interpreting external/public papers and links, so untrusted third-party content can be read and materially influence agent decisions.