arxiv

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill directly queries the public arXiv API (http://export.arxiv.org/api/query) in Step 2/3 and parses paper titles/abstracts which it then reads, summarizes (Step 5), and uses to drive actions like downloads and wiki ingestion (Step 6), so untrusted third-party content is consumed and can influence subsequent tool use and decisions.