discovering-emergence

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill runs a “Literature scan” using the arxiv CLI in the Discovery Flow, which fetches outsider-authored arXiv abstracts at runtime and injects their text into the agent’s LLM context via the CLI results used for hypothesis selection.