ccf-literature-monitor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested at runtime from public web/research sources (e.g., arXiv abstracts and OpenReview/proceedings page content) via the monitoring workflow’s “Fetch recent papers… read at least the title and abstract” and “Execute… using arXiv API, OpenReview, official venue/proceedings pages, Semantic Scholar/OpenAlex/DBLP/Crossref, and project pages,” which are authored by third parties.