paper-lab

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly states the planning phase uses "/dogpile + /arxiv research related work and citation targets" and lists /dogpile and /arxiv in the required workflow, so the agent is expected to fetch and interpret public third‑party content (arXiv/search results) that can influence review/fix decisions.