autoresearch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow instructs the agent to fetch and read academic literature and preprints via Semantic Scholar, arXiv, and CrossRef, which allows outsider authors to publish indirect prompt injection payloads within paper abstracts and contents.