paper-harbor
Warn
Audited by Snyk on May 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's documented workflow and runner scripts (SKILL.md, scripts/sciencedirect_drission_run.py and scripts/cnki_drission_run.py) explicitly open logged-in browsers to ScienceDirect and CNKI and run injected JS to scrape result/article pages (including EasyScholar IF badges) and then use that parsed page content to decide priority and drive Zotero imports, so untrusted third-party page content can directly influence tool actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata