chem-similarity-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill calls PubChem’s public REST endpoint (https://pubchem.ncbi.nlm.nih.gov/rest/pug/compound/fastsimilarity_2d/.../JSON) and ingests the returned compound properties (including SMILES/IUPAC/etc.) into the script’s JSON output, which is then available as LLM-readable text—this is outsider-authored public web content.