nature-data

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is ingested via the user’s manuscript/data-availability inputs (e.g., dataset names/accessions/restrictions and Chinese notes) into the dynamic workflow that drafts and audits statements, and this workflow requires only loading local fragments, not selecting a specific trusted item before consuming the free-form user content.