arxiv

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). This workflow fetches outsider-authored arXiv/semantic scholar metadata (titles/abstracts) at runtime via curl/API calls, then parses and prints it as readable text (e.g., a:summary → “Abstract”), which can be included in the agent’s LLM context indirectly.