systematic-review-assistant
Warn
Audited by Snyk on Apr 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's workflow explicitly instructs searching and screening records from public third-party databases (e.g., "Databases to search: PubMed/MEDLINE, Embase, Cochrane CENTRAL, ClinicalTrials.gov") and performing title/abstract and full-text review, meaning the agent is expected to ingest and act on open web content that could contain untrusted instructions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata