academic-deep-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In Phase 3 Execution, the required workflow runs web_search and then web_fetch on primary sources derived from the user’s research topic, meaning outsider-authored free text from the open web can be ingested directly into the LLM for analysis.