digest-paper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests outsider-authored free text via the “fallback pipeline” that fetches full-text PDFs from public/open-access repositories (e.g., Europe PMC/PMC, CORE, OpenAIRE, Zenodo, HAL, SSRN, etc.) and then step 5 “Read the full paper — the PDF, cover to cover,” which makes the PDF’s extracted prose part of the agent’s LLM context.