scholar-sidekick-cli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs passing API keys via command-line flags (--api-key, --rapidapi-key) and shows the Authorization: Bearer ssk_… pattern, which encourages embedding secret values verbatim in headers/commands and thus creates an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow is a CLI that calls the Scholar Sidekick REST API and then ingests the returned metadata (e.g., titles/records) into the agent’s context as formatted text/JSON; since that content is fetched at runtime from a public third-party service, it is outsider-authored free text.