文献综述自动器

• Analyzed: May 14, 2026, 10:26 AM
• Findings: 1
• Version: 1.0.0
• Hash: e817a023c565f85a504caf6dd825243ac6bced2e1503b106dcb58b01cf020ca6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate tool for academic literature review, fetching data from Semantic Scholar, arXiv, and CrossRef. However, it is classified as suspicious due to several security vulnerabilities. Specifically, the LLM API endpoint (llm_api_base) is user-configurable in 'main.py' and 'config.json', which could allow for the exfiltration of the 'llm_api_key' if redirected to a malicious server. Additionally, the tool is vulnerable to indirect prompt injection because it fetches untrusted paper abstracts from external APIs and incorporates them directly into LLM prompts within 'main.py' without sanitization. No evidence of intentional malice or data exfiltration to unauthorized domains was found.