arxiv-paper-report

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). workflow is arXiv-centered and only ingests outsider-authored free text via arXiv paper metadata/abstract/full-text fetched by the bundled literature-search-arxiv skill (discovered through user-provided query strings, but the free text source itself is paper content), so it can be influenced by outsider paper authors but not by an arbitrary free-text feed the workflow passively monitors without selecting arXiv items.