get-paper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly navigates to and scrapes search results and BibTeX pages from the public site scholar.google.com (Steps 1–4), and the agent reads and acts on that content (presenting selections and appending BibTeX entries), so untrusted third‑party content can influence its actions.