openalex-paper-search
Warn
Audited by Snyk on Mar 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). This skill queries the public OpenAlex API (e.g., /works endpoints) and ingests untrusted third-party content — including reconstructed abstracts from abstract_inverted_index and external PDF/landing pages via best_oa_location.pdf_url or open_access.oa_url — which the agent is instructed to read and use to drive literature-survey actions and follow-up queries.
Audit Metadata