pubmed-paper-exploration
Warn
Audited by Snyk on Jun 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). 此 workflow 會在執行時透過
unified_search/fetch_article_details/get_fulltext等工具去抓取並讀取外部資料庫或網頁上的論文全文與元資料(屬於非使用者自行撰寫的公開/第三方內容),這些可包含自由文本並進入 LLM 上下文。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata