paper-refbib-stub

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/json_to_bib.py, the runtime reads a caller-provided multi-search-engine JSON payload from stdin (sys.stdin.read() → json.loads()), and then incorporates outsider-supplied fields like title, url, and especially snippet directly into the emitted BibTeX note field (snippet = _escape(... )[:300] and note_bits.append(snippet)).