paper-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly states the agent performs web search and queries public sources (arXiv, Semantic Scholar, Google Scholar, PubMed) and loads PDFs via arxiv_to_prompt/load_pdf, so it fetches and reads untrusted third‑party content (papers/abstracts) that can influence its decisions and tool use.