scholar-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly calls s2cli (Semantic Scholar), openalexcli (OpenAlex), and arxivy (arXiv) to fetch public paper metadata, abstracts, citations and recommendations from open third-party sites, which the agent is expected to read and use to drive searches, recommendations, and follow-up tool actions—allowing untrusted external content to influence behavior.