paperclip

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses the Paperclip CLI to search, read, and process biomedical papers, clinical trials, and regulatory documents from external corpuses (PMC, arXiv, bioRxiv, medRxiv, FDA, clinical trials), which contain outsider-authored free text ingested at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes an installation command that executes a remote bash script from https://paperclip.gxl.ai/install.sh at runtime during setup.