arxiv-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill fetches and parses papers from the public arXiv Atom feed (http://export.arxiv.org/api/query) and directly reads titles/abstracts to score, group, and decide which papers to include in generated digests, so untrusted third-party (arXiv) content can materially influence its behavior.