empirical-paper-writer
Warn
Audited by Snyk on May 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly instructs the agent to "Search literature and gather" papers and to "Verify every citation via web search + source page (and PDF if available) before adding to ref.bib" (see Phase 0.5 and Safety & Guardrails), meaning the skill ingests open, third‑party web content (papers, source pages, PDFs) and uses that content to drive baseline selection, claim upgrades, and writing decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata