binder-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md "Target preparation" step explicitly instructs to "Fetch structure from PDB", so the agent is expected to ingest public, user-submitted PDB files and use their content (chains/residue numbers/hotspots) to drive design decisions and tool invocations, allowing untrusted third‑party content to materially influence actions.