bib-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md’s PDF workflow instructs extracting the outsider-written PDF reference text into refs.txt, then running resolve_refs.py which reads that file at runtime (split_references(args.refs.read_text(...))) and processes the resulting free-form prose into LLM-readable output (printed findings/logs).