general-arxiv-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is ingested from the public ArXiv API response (feedparser parses the fetched XML/Atom entries, including each paper’s entry.title and entry.summary) via urllib.request.urlopen(url).read() → feedparser.parse(response) → paper["title"]/paper["summary"].