ArXiv

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and parses public third-party content from arXiv's Atom API (https://export.arxiv.org/api/query) and AlphaXiv overviews (https://alphaxiv.org/overview/{ID}.md), and the required workflows (Workflows/Latest.md, Workflows/Paper.md, Workflows/Search.md) instruct the agent to treat those external documents as primary sources that directly influence summaries, relevance judgments, and follow-up actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly performs runtime fetches of AlphaXiv markdown (e.g., https://alphaxiv.org/overview/{PAPER_ID}.md and https://alphaxiv.org/abs/{PAPER_ID}.md) and, when present, treats that structured markdown as the primary source injected into the model context—i.e., remote content directly controlling the agent's prompts/output.