nature-reader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill reads publisher or preprint HTML pages via static/fragments/source/html.md and resolves DOIs or arXiv identifiers via static/fragments/source/doi-arxiv.md, allowing an outsider to publish arbitrary web pages or articles that the agent ingests at runtime.