paper-2-web
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill explicitly performs automatic logo discovery using the Google Search API (references/paper2web.md and installation notes) which downloads images from the open web and integrates them into generated websites/posters, meaning the agent fetches and interprets untrusted third‑party content.
Audit Metadata