bear-support
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). 该技能在运行时通过
sci search获取并读取.json/.bib中的title/authors/year/abstract等文本来生成证据与摘要；这些检索结果来自外部学术数据库/网页抓取内容，属于“公共 web/第三方来源的文本在运行时进入 LLM 上下文”的路径。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata