preprint-search

Warn

Audited by Snyk on Mar 2, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). SKILL.md Phase 1 explicitly directs the agent to search and ingest content from public third‑party preprint servers (arXiv, medRxiv, bioRxiv) and Phase 3 requires reading/interpreting those papers to filter, rank, and summarize them, so untrusted user-generated content can materially influence decisions and actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 2, 2026, 07:50 AM