nature-paper-to-patent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In references/disclosure/prior_art_search.md Step 5, the workflow uses scripts/disclosure/cnipa_epub_search.py (calling cnipa_epub_crawler.search_epub_keyword) to fetch CNIPA result pages from http://epub.cnipa.gov.cn/, then ingests extracted title/abstract/link text from that HTML into the drafting process.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes runtime scripts that fetch CNIPA search results from http://epub.cnipa.gov.cn/ (e.g., via cnipa_epub_search / cnipa_epub_crawler), which the agent uses during prior-art search to populate evidence and thus directly influences prompts/outputs, and this CNIPA fetch is a required runtime dependency.