citation-chaining-guide

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to fetch and process paper metadata and references from the public OpenAlex API (https://api.openalex.org) and references other public sources (Google Scholar, Scopus, etc.), meaning the agent ingests untrusted third‑party content as part of its citation‑chaining workflow which can influence subsequent selections and actions.