opencite

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md and workflow explicitly fetch and download papers and PDFs from public third-party sources (Semantic Scholar, OpenAlex, PubMed, arXiv, bioRxiv and publisher sites) via commands like search, pdf, batch-fetch and convert and instruct the agent to "read and synthesize" the converted markdown, meaning untrusted public content is ingested and can materially influence subsequent decisions/actions.