mathpix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow sends user-supplied src URLs (e.g., https://mathpix.com/examples/equation.png) to Mathpix, which fetches that external page/image at runtime and returns extracted text/LaTeX into the agent’s LLM context—i.e., public web content from an outsider source via the src field.