paper-deep-dive

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow actively searches for and fetches a specific paper's arXiv HTML/LaTeX, publisher, OpenReview, CVF, and project-page text, which are outsider-authored sources the agent must select rather than content an outsider can push into a monitored feed, so the risk is low.