research-paper-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly instructs the agent to "review any provided research materials, data, or references" and notes "User provides the research content," so the agent will ingest and interpret arbitrary user-supplied/public research materials (untrusted third-party content) as part of its workflow, enabling indirect prompt injection.