alterlab-pdb

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly directs the agent to fetch and parse public RCSB PDB content (e.g., downloads from https://files.rcsb.org/download/{PDB_ID}.pdb and GraphQL/REST queries to https://data.rcsb.org) which are public, user-deposited resources the agent is expected to read and that can materially influence downstream decisions and tool actions.