pubmed-search
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to query NCBI PubMed via BioPython Entrez and fetch article titles/abstracts (from pubmed.ncbi.nlm.nih.gov), which are public third‑party texts the agent reads and may act on (e.g., summarization and follow‑up actions), so untrusted content could influence behavior.
Audit Metadata