research
Warn
Audited by Snyk on Jun 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is fetched at runtime from public web sources (e.g., arXiv/Semantic Scholar/ACL/JMLR pages and PDFs) and then converted into LLM-readable prose via
scripts/extract.py(pdftotext stdout) and/orscripts/prototype/extractors/web_extractor.py(HTML text), which is subsequently fed into the prototype pipeline’s analysis/generation context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata