research-ideation
Warn
Audited by Snyk on May 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill's SKILL.md and Zotero Integration sections describe using WebSearch across public academic sources (arXiv, Google Scholar) and automated Zotero flows that fetch landing pages and full-text PDFs (zotero_add_items_by_identifier, PDF cascade, zotero_get_item_fulltext), so the agent ingests and analyzes untrusted third-party webpages/PDFs as part of its workflow.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata