chem-db-qmof

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The runtime workflow downloads CIF text from the Materials Project “MPContribs” project (qmof) via mpcontribs-client (queryContributions → getStructureById → cif_string), which is outsider-authored public/community database content that becomes readable LLM context if the agent ingests the downloaded CIFs.