biocontext-knowledge-queries

Warn

Audited by Snyk on Mar 30, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill explicitly performs live queries against public third-party sources (e.g., ov.biocontext.search_literature and ov.biocontext.get_fulltext retrieving Europe PMC / PubMed Central full text, ov.biocontext.search_preprints for bioRxiv/medRxiv, and many public DB queries like UniProt, STRING, PanglaoDB, OpenTargets) and ingests those external results into its annotation and decision workflows, so untrusted external content can influence subsequent actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 30, 2026, 06:15 AM
Issues
1
Security Audit — snyk — biocontext-knowledge-queries