scholar-sidekick-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill audits bibliography files (such as .bib, .ris, or CSL-JSON) which can be authored by outsiders, exposing the agent to untrusted free text during batch audit operations.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the installation and execution of an npm package (scholar-sidekick-cli) from an unspecified registry or repository locator, which lacks strong first-party publisher provenance.