prepare-camera-ready

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow reads the user-provided acceptance email instructions (outsider-authored free text) and also fetches the venue’s camera-ready page / re-checks cfp_url (public web content), then injects that text into the agent’s LLM context as part of the checklist/warnings.