paper-scanner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). SKILL.md Step 1 ("Scan Sources") explicitly ingests public third-party content from arXiv, conference proceedings, tech blogs, and industry reports which the agents are required to read, interpret, score, and turn into implementation proposals—behavior that can be influenced by malicious or misleading external content.