xray-paper-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill accepts and reads paper content from user-provided inputs (PDF path, pasted text, or arbitrary URLs per Step 1/Step 2 and the README), which means it ingests open third‑party content (public papers/webpages) that could contain untrusted/user-generated material and thus enable indirect prompt injection.