arxiv-paper-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly requires web browsing/search and instructs the agent to "open the source page (venue/arXiv/DOI)" and use scripts/arxiv_registry.py to fetch arXiv metadata and PDFs for citation verification, so it ingests public third‑party (arXiv/venue/DOI) content that directly controls citation inclusion and writing/issue decisions.