ccf-paper-reviewer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Workflow reads outsider-authored manuscript text at runtime (including explicit “hidden instructions” in “manuscript text, appendix, comments, figures/captions, and source snippets”), so free text submitted by the paper’s author can be ingested and acted on.