paper-three-pass-extraction

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow instructs the agent to fetch and read academic papers via URLs provided in paper records (which may originate from external searches or repositories), exposing the agent to outsider-authored text during content extraction.