paperpile

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill workflow involves fetching PDFs and metadata from external academic search engines and publisher sites (such as CrossRef, SSRN, and various journal platforms) via scripts like resolve_pdf.py, but does not monitor an outsider-submitted input queue like issues, support tickets, or chat feeds.