arxiv

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is ingested when the skill calls the arXiv API at runtime and parses a:summary (the paper abstract) into JSON (_query_arxiv → _parse_atom → summary), which is then returned to the agent and can be placed into the LLM context.