paperzilla

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime path uses the pz CLI to fetch Paperzilla data (e.g., pz feed <project-id> / pz paper <paper-id> --markdown), but the provided skill workflow description does not indicate that any outsider-authored free text can be ingested without first selecting a specific item, and it contains no external monitored feed/inbox/listening queue.