literature-review

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (medium risk: 0.30). The skill instructs users to install parallel-cli via curl -fsSL https://parallel.ai/install.sh | bash, which downloads and executes shell scripts from a third-party domain without cryptographic verification or credible provenance.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The literature-review workflow instructs the agent to run web searches and extract full content from web pages and papers via external tools, which can expose the agent to untrusted external text content from arbitrary search results and web pages.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The installation instructions include a remote shell script execution via curl from https://parallel.ai/install.sh to install parallel-cli, introducing a weak runtime external dependency.