PubMed-Search

Fail

Audited by Snyk on Mar 11, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). The astral.sh URL points to a direct .sh installer (high-risk to curl|sh from a non-massively-known domain) while the ncbi.nlm.nih.gov URL is an official NCBI account page (low risk); because the set includes a direct executable script from a less-known domain it should be treated as potentially unsafe unless you inspect the script and verify the source.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill fetches and parses live content from public PubMed/PMC endpoints (via the PubMed E-utilities API and by requesting PMC article pages in pubmed_search.py and is described in SKILL.md), then directly incorporates abstracts/metadata into generated analysis prompts and download logic—exposing the agent to arbitrary third‑party webpage/article content that can influence subsequent analysis actions.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 11, 2026, 04:04 AM