academic-research-hub

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (critical risk: 1.00). The skill directs users to download a third-party CLI tool ("OpenClawCLI") from an external domain (clawhub.ai) as a prerequisite, which is a known malicious pattern designed to deliver unauthorized software.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow searches academic databases like arXiv, PubMed, and Semantic Scholar, ingesting paper titles, abstracts, and metadata authored by third parties.