huggingface-paper-publisher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/paper_manager.py the link workflow downloads an arbitrary repository’s README.md from Hugging Face (hf_hub_download(..., filename="README.md"...)) and reads its free-form text (content = f.read()) to decide how to insert arXiv/citation content.