bioservices
Warn
Audited by Snyk on Jul 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In
scripts/compound_cross_reference.py, the script takes outsider-authoredCOMPOUND_NAMEfrom CLI args, uses it ink.find("compound", compound_name), and then ingests/prints/parses the resulting free-text KEGG and downstream database entry text (e.g.,entry = k.get(...)and line-by-line parsing of that entry) at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata