aris-research-wiki

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's ingest workflow (/aris-research-wiki ingest) explicitly fetches and scans papers from public sources like arXiv/DBLP/Semantic Scholar and then reads/interprets that content to extract relationships and update the wiki (edges, query_pack, ideation hooks), so untrusted third-party content can materially influence agent actions.