scholar-sidekick-python

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow is a Python client that ingests only user-provided bibliographic inputs (e.g., claims dicts or reference_strings) and sends them as structured request fields/strings to the Scholar Sidekick REST API, rather than reading outsider-authored free text from an email/chat/inbox/feed or any monitored external submission queue.