jk-literature-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). PubMed/Crossref JSON fields (e.g., titles, journal names, author strings) fetched at runtime from NCBI and Crossref are converted into readable prose (e.g., references_ama.txt, README.md, and summary_table.json) and thus can be fed into the agent’s LLM context as candidate text; this is outsider-authored public web content.