emdb-database

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md’s required runtime workflow calls public EBI endpoints (/ebisearch/ws/rest/emdb and /emdb/api/entry/{EMD-XXXXX}) and ingests their JSON fields (e.g., titles/authors/citation text) into the agent’s LLM context, which is outsider-authored free text from public web content.