pubchem-compound-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly fetches and parses public PubChem content (e.g., Step 5 "Bioactivity Data Access" using the PUG-REST URL https://pubchem.ncbi.nlm.nih.gov/rest/pug/compound/cid/{cid}/assaysummary/JSON and examples like get_synonyms/downloads) which the agent ingests and uses to drive analysis/decisions, exposing it to untrusted third-party content.