aris-research-pipeline
Warn
Audited by Snyk on May 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's Stage 1 literature pipeline (/aris-research-lit invoked by /aris-idea-discovery) explicitly fetches public arXiv content (metadata and, if ARXIV_DOWNLOAD=true, full PDFs) so the agent ingests third-party, user-submitted material that can influence idea selection and downstream actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata