arxiv-source-first-paper-ingest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime path reads outsider-authored LaTeX source from arXiv at tools/arxiv-latex-display-math-extractor by walking the downloaded .tex files and rendering/extracting their contents (after fetching https://arxiv.org/e-print/<id> in Step 1).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill runs "cargo run" which will fetch and compile crates from the registry index at registry+https://github.com/rust-lang/crates.io-index during runtime/build, meaning remote code is fetched and executed as required dependencies (registry+https://github.com/rust-lang/crates.io-index).