citation-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime, the required workflow calls scripts that query external scholarly sources (e.g., Google Scholar/PubMed/CrossRef/arXiv/DataCite) and ingest their returned metadata/fields (including titles/abstracts/URLs) into the agent’s context for BibTeX generation and validation, which is outsider-authored free text from public web/API responses.