paper-matrix-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md:26-33 requires running scripts/build_sota_matrix.py which prints sota_matrix.md to the agent’s final answer; that Markdown is generated from extractions/ JSON inputs (from extract-methodology), which are derived from outsider-authored paper text, so their free-form fields (e.g., limitations/metrics/results) can be ingested into the LLM context via the printed table.