Literature Research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). SKILL.md requires calling alphaxiv.get_paper_content(fullText: true) and alphaxiv.answer_pdf_queries on arbitrary paper/PDF URLs at runtime, which ingests outsider-authored full paper text (public web/arXiv content) into the agent’s LLM context.