literature-search

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill prompt instructs the agent to read an API key from a local markdown file and pass it directly as a command-line argument to a Python script, exposing the secret in the LLM's context and execution.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent searches academic databases (Semantic Scholar, arXiv, OpenAlex, CrossRef) and ingests paper titles, abstracts, and downloaded LaTeX source code.