academic-citation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). 在 required workflow 的联网全文获取与阅读阶段（Step 3a），系统会先进行公开来源检索/定位候选文献，再获取并把候选论文全文（HTML/PDF 转文本，且可能包含图片 base64）提供给 literature-reader-agent；因此外部作者可通过可被搜索/检索到的候选内容（如论文全文/图片或其可读转写）向流程输入可读自由文本。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The convert-pdfs-to-md pipeline calls the MinerU service (DEFAULT_API_BASE "https://mineru.net") at runtime to upload PDFs and download converted Markdown which is then injected into the literature-reader-agent prompts (i.e., external content directly controls model input) and is required for the local-PDF conversion preflight.