paper2poster

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow ingests outsider-authored free text from the paper’s upstream spec/assets—e.g., <outdir>/assets/meta/paper_spec.md and related extracted text (from outside the operator) that gets substituted into poster.html and then read by the LLM (via iterative fill/polish and audits), creating an indirect prompt-injection surface.