nature-academic-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime, the MCP tool search_papers/get_paper_by_id/get_citation ingests free-text fields (e.g., title, abstract, summary) returned by outsider-authored public web APIs (CrossRef/PubMed/arXiv) and returns them to the agent as JSON strings, which the agent then places into its LLM context.