skills/denden047/claude-scientific-skills/paper-lookup/Snyk

paper-lookup

Warn

Audited by Snyk on Jul 13, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). Yes—this skill’s required workflow makes runtime HTTP calls to outsider-authored public web APIs (e.g., arXiv/CORE/Crossref/PubMed/PMC/Semantic Scholar/OpenAlex/Unpaywall) and then returns their raw JSON/parsed XML, which becomes readable free text in the agent’s LLM context.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 13, 2026, 10:21 AM

Issues

1