literature-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Step 1 "Gather Papers" explicitly instructs using the opencite tool (e.g., "uvx opencite search/canonical/batch-fetch") to fetch public academic papers, and Step 2 requires the agent to read and annotate those fetched papers, meaning it ingests untrusted third‑party web content that can materially influence synthesis and subsequent actions.