read-arxiv-paper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill directly downloads and unpacks TeX source from arbitrary public arXiv URLs (e.g., https://www.arxiv.org/src/{arxiv_id}) and reads/interprets those files to produce summaries, exposing the agent to untrusted third-party content that could embed instructions.