nature-academic-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow ingests outsider-authored free text from the user’s “query/topic/keywords/MeSH term” input and passes it directly into the MCP tool search_papers/lookup_mesh (e.g., search_papers(query=...) → CrossRef/PubMed/arXiv search), so the attacker can supply arbitrary poison text at runtime.