aris-research-lit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Step 1 "Search (external)" and related workflow explicitly fetch and ingest open web sources (WebSearch/arXiv/Semantic Scholar/Google Scholar and optionally download arXiv PDFs) and then reads and acts on that content (summarize, rank, download, and update wiki/notes), so untrusted third‑party content can influence subsequent tool use and actions.