lit-search
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and ingests public third-party content (e.g., OpenAlex API at https://api.openalex.org, Unpaywall API, OA PDF links and preprint servers like SocArXiv/SSRN) and is designed to read and interpret those abstracts and full-texts as part of screening and annotation, creating a clear avenue for indirect prompt injection from external content.
Audit Metadata