peer-review-ops

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow explicitly instructs the agent to check and consume external third‑party databases (see PHASE 3.2 "COI Data Sources" listing ORCID, Scopus/Web of Science, PubMed, CrossRef, funding agency grant databases) and to use that content for COI screening and reviewer selection (PHASE 3.1/3.3), so untrusted or user-populated third‑party data would be read and could materially affect tool decisions.