paper-artifact-runtime

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime execute() reads outsider-supplied JSON from standard input (including free-text fields like sections, bib_text, writing_plan, manuscript_package, expansion, manifest, and refbib) and ingests that text directly into operations such as persist_sections, assemble_manuscript_tex, citation_map, materialize_manuscript, apply_length_expansion, and compile_pdf.