huggingface-paper-publisher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In scripts/paper_manager.py, the index_paper/check_paper/get_arxiv_info runtime path fetches external arXiv/HF page text based on the provided --arxiv-id, but the outsider controls only the identifier (not the content itself), so it’s not an “outsider-authored free text” ingestion workflow.