skills/jaechang-hits/scicraft/uspto-database/Snyk

uspto-database

Warn

Audited by Snyk on Jul 10, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.75). The required runtime workflow calls external APIs (PatentsView/BigQuery) and ingests their JSON/text fields like patent_title and patent_abstract into the agent’s execution context, which is outsider-authored free text from public web data sources.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 10, 2026, 03:35 PM

Issues

1

Security Audit — snyk — uspto-database