paper-fetcher
Warn
Audited by Snyk on Mar 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill explicitly loads and parses HTML from the public Sci-Hub site (https://www.sci-hub.su/DOI) as shown in SKILL.md and scripts/fetch_paper.py to extract and download PDFs, meaning it ingests untrusted third‑party content that directly determines subsequent download actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata