paper-recommendation-guide

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). SKILL.md explicitly instructs fetching and reviewing public third‑party content (e.g., the OpenAlex curl example and the "Process recommendation queue" step referencing OpenAlex/Research Rabbit/Connected Papers, plus "Social signals" like academic Twitter/Mastodon and subreddits), so untrusted user-generated content would be read and used to drive recommendations and actions.