zotero-report

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests public third‑party content — it runs arXiv searches and reads Zotero collection items and downloaded PDF text (see SKILL.md Mode 2/3 workflow and scripts/generate_report.py which calls client.get_collection_items, client.download_attachment and extracts pdf_text_preview/full_text) and then uses that content to generate search queries, add papers to Zotero, and drive report synthesis, so untrusted external content can influence tool use and next actions.