prisma-screening

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md describes a workflow that imports SOPs like paper-search/paper-research for full-text “AI summaries” of candidate papers, which likely requires fetching/reading outsider-authored document text at runtime (e.g., paper full text or metadata from external sources) and inserting it into the agent LLM context for screening.