biorxiv-database

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests abstracts, metadata, HTML pages, and downloadable PDFs from the public bioRxiv preprint server (e.g., https://www.biorxiv.org/content/... and related API endpoints), which are user-submitted third‑party content that the agent is expected to read and interpret.