nature-citation
Warn
Audited by Snyk on Aug 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is ingested from the user-provided
--text/--text-file/--claim/--claim-fileinputs, is segmented, and is then used to construct Crossref queries insidescripts/nature_citation.py(viaread_text_inputs(),read_claims(),segment_text(), andsearch_segment()), so prompt-injection-style payloads can flow into the runtime workflow.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata