novelty-check

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Phase B explicitly requires WebSearching/public sources (arXiv, Google Scholar, Semantic Scholar) and WebFetch-ing paper abstracts/related-work, and Phase C uses those retrieved papers to drive the reviewer model's assessment, so untrusted third‑party web content directly informs decisions.