alterlab-openalex
Warn
Audited by Snyk on Apr 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly makes runtime requests to the public OpenAlex API (https://api.openalex.org) — see SKILL.md and scripts/openalex_client.py (e.g., _make_request, search_works, get_entity, cited_by_api_url usage) — and consumes untrusted public metadata (titles, abstracts, cited_by lists, OA URLs) which the agent reads and uses to drive subsequent queries and analysis, so third-party content could indirectly inject instructions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata