skills/kinandigital/scientific-agent-skills/pathway-enrichment/Snyk

pathway-enrichment

Warn

Audited by Snyk on Aug 17, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). scripts/run_enrichment.py ingests user-supplied gene-list/ranked CSV content via --genes/--background/--deseq2/--rnk files into in-memory text/CSV parsing before calling gseapy (gp.enrichr/gp.enrich/gp.prerank), so outsider-authored free text can directly reach the runtime workflow.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 17, 2026, 02:15 AM

Issues

1