doi-bibtex

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's scripts/doi2bib.sh fetches BibTeX entries from public DOI URLs (e.g., https://doi.org/) and SKILL.md specifies the workflow will show and potentially append that fetched content to a .bib file, meaning untrusted third-party page content is read and can influence file-writing actions.