paper-analyzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md Step 2 explicitly fetches content from public arXiv URLs (curl to https://arxiv.org/pdf/[PAPER_ID], https://arxiv.org/e-print/[PAPER_ID], and https://arxiv.org/abs/[PAPER_ID]) and Step 3 requires the agent to read and analyze that untrusted public paper content, which could materially influence downstream analysis and tool-driven actions.