pkpd-modeling
Warn
Audited by Snyk on Jul 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In
scripts/_common.py, multiple scripts (e.g.,allometry_and_fih.pyline 221 and others viaread_table) ingest user-supplied CSV/TSV rows from a path or stdin (read_text()/sys.stdin.read()), and that free-text data can later appear verbatim in outputs/findings (e.g.,Report.finding()/Report.note()), creating an outsider text injection surface.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata