citation-verify

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill processes .bib files or manuscript drafts supplied by the user containing reference lists, which can include attacker-controlled citation strings or metadata designed to trigger prompt injection during verification steps.