clinicaltrials-gov-parser
Warn
Audited by Snyk on Aug 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). scripts/main.py ingests free-text fields (e.g., --sponsor/--condition/--keyword) from the user into ClinicalTrials.gov API query parameters, and then reads the resulting trial titles/fields returned from the external API at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata