gap-to-topic
Warn
Audited by Snyk on Jul 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The required runtime workflow for
gap-to-topicincludes Gate ① adversarial search and then feeds the retrieved on-topic paper metadata (titles/DOIs/authors/abstract-derived fields) throughliterature-triage-matrixto build.research/literature_matrix.md, which is then read by later LLM steps—this is outsider-authored free text originating from public scholarly sources fetched at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata