alterlab-metabolomics-wb

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md explicitly instructs the agent to fetch and parse public, user-contributed study and compound data from the Metabolomics Workbench REST API (https://www.metabolomicsworkbench.org/rest/), using returned JSON (e.g., study summaries, RefMet entries, moverz matches) to select study_id/regno and drive subsequent requests and actions, which exposes the agent to untrusted third-party content that can influence its decisions.