typst-paper
Warn
Audited by Snyk on May 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's bibliography workflow (module
bibliographyrunningscripts/verify_bib.py) and the included references/CITATION_VERIFICATION.md explicitly require querying public services (Semantic Scholar, CrossRef/DOI, arXiv and Exa MCP) to fetch and verify BibTeX — i.e., ingesting untrusted, user-generated public web content that the agent must read and act on to decide/modify citations.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata