arxiv-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill uses the arxiv Python client in arxiv_search.py to query the public arXiv repository and returns paper titles and summaries (paper.summary), which are user-submitted, open third‑party content that the agent will ingest and could contain arbitrary instructions.