zotero-scholar-guide

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly fetches metadata from public third‑party sources (Crossref at https://api.crossref.org/works/{doi}, arXiv via http://export.arxiv.org/api/query, and mentions OpenAlex) and then parses those abstracts/metadata to build Zotero items and auto‑tag/organize items, so untrusted external content is read and can materially influence the agent's actions.