nature-downloader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/batch_download.mjs, outsider-provided free text is ingested and executed via evalJs on live Web of Science pages (e.g., --topic → set search input and later DOM-reading with document.body.innerText), meaning attacker-controlled text can flow into the runtime’s browser-evaluated context.