paper-context-resolver

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's references/paper-assisted-reproduction.md explicitly instruct the agent to consult public third-party sources (e.g., the paper link, official project/paper pages, arXiv or OpenReview, Google Scholar) and to read those papers to resolve reproduction-critical details, meaning untrusted external content is fetched and can influence the agent's decisions.