rdkit-chemdraw-cdxml

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads and parses caller-supplied CDXML text (including free-form <t>/<s> label text) from build_reaction_scheme.py via open(cdxml_path, ...) into Indigo (ind.loadReaction(cdxml)), and also validates/rebuilds it from file text in check_scheme.py via Path(cdxml_path).read_text(...) passed to rdChemDraw.MolsFromChemDrawBlock(...) and ET.fromstring(...).