comm-lit-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow explicitly includes “broader web” search (SKILL.md:53-54) and then extracting paper-level facts including “Source URL” (SKILL.md:84-99), which implies runtime ingestion of outsider-authored free text from public web pages/DOI/author-hosted copies when higher-tier databases are insufficient.