skills/alterlab-ieu/alterlab-academic-skills/alterlab-citation-graph/Snyk

alterlab-citation-graph

Warn

Audited by Snyk on Jun 15, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.75). Outsider-authored free text is ingested from OpenAlex at runtime: build_graph.py fetches title/display_name fields from public OpenAlex work records via OpenAlexClient.get_work() and OpenAlexClient.cited_by(), then serializes those strings into the GraphML/JSON (LLM-readable prose fields like title).

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 15, 2026, 03:28 PM

Issues

1

Security Audit — snyk — alterlab-citation-graph