arxiv-reading

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text can enter the LLM via the runtime web fetch of arXiv/ar5iv HTML (public web content) when arxiv2md fails, e.g., “WebFetch on https://ar5iv.org/abs/” which returns rendered paper text/HTML that is then converted to Markdown and fed to the agent.