paper-creator
Warn
Audited by Snyk on Mar 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's Phase 2 (Literature & Citations) explicitly fetches public OpenAlex API results with curl and pipes them through scripts/openalex_to_bibtex.py (and also references ingesting non-OpenAlex web pages/URLs), which are then read and used to build the bibliography and inform the writing/verification loop, so external third‑party content can materially influence subsequent actions.
Audit Metadata