alterlab-glycoengineering

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The SKILL.md and references/glycan_databases.md include explicit code and instructions that fetch and consume data from public third‑party services (e.g., GlyConnect API at https://glyconnect.expasy.org/, GlyTouCan API, and the NetOGlyc web service) and instruct the agent to use those results to inform glycosylation analyses and engineering decisions, which exposes the agent to untrusted external content that can influence actions.