research-zotero

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text from the user’s Zotero library is fetched at runtime via the Zotero Web API (e.g., scripts/fetch_zotero_items.py → _zotero.fetch_paginated_items() → api_get_json()), then written into zotero-items.json/zotero-sync.md as readable JSON/Markdown that downstream LLM steps may ingest.