alterlab-bindingdb

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly instructs the agent to fetch and ingest data from the public BindingDB REST API (https://www.bindingdb.org/axis2/services/BDBService) and downloadable TSVs (https://www.bindingdb.org/bind/chemsearch/marvin/Download.jsp), and the provided workflows (e.g., "Find Best Inhibitors", polypharmacology profiling, ML dataset preparation) require the agent to read and act on that external, user-curated public data which could materially influence selections and downstream actions.