chembl-database-bioactivity

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly queries the public ChEMBL API via the chembl_webresource_client (e.g., new_client.molecule, new_client.activity, new_client.target) and its SKILL.md workflows (e.g., "Core API" and "Workflow 1: Find Inhibitors for a Target") show the agent reading and acting on returned public bioactivity/target data, exposing it to untrusted third‑party content that could influence subsequent decisions.