arxiv

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly queries and fetches public arXiv content (see SKILL.md and tools.py: arxiv_search, arxiv_get_paper, arxiv_download), returning abstracts, comments, links, and PDFs from external, user-authored papers that the agent ingests and can materially influence its decisions or subsequent tool use.