reactome-database

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md’s required workflow calls Reactome public REST endpoints at runtime (e.g., requests.get(...).json() / resp.text in the reactome_get helper), so the LLM context can include outsider-authored free text from fetched JSON/text responses (public web content).