paperzilla

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). SKILL.md explicitly directs the agent to fetch and read content from the public Paperzilla service (e.g., "pz feed ", "pz paper " and the PZ_API_URL=https://paperzilla.ai configuration), which are open/public feeds and recommendations the agent is expected to interpret and that could materially influence its actions.