github-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow monitors and consumes GitHub repositories, issues, READMEs, and code searches where external third parties can submit arbitrary untrusted content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script connects to the Papers With Code API endpoint https://paperswithcode.com/api/v1 during runtime to search and retrieve paper-to-repo mappings as behavioral configuration data, and Papers With Code is an unverified third-party unofficial source.