cnki-paper-detail

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required workflow opens a CNKI paper detail page at runtime (either user-supplied URL or current page) and then runs browser action=act kind=evaluate to read DOM text like title/authors/abstract/keywords from that outsider-authored web content into the LLM context.