huggingface-paper-publisher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/paper_manager.py, the link workflow downloads a repository’s free-text README.md from Hugging Face (hf_hub_download(... filename="README.md")) and ingests it into _add_paper_to_readme at runtime before updating and re-uploading, so an outsider can provide poison by creating/modifying that README content.