chem-spectrum-matcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). When --fallback_public_db is enabled, match_spectrum.py calls fetch_nmrshiftdb2() which performs a runtime HTTP request to the public NMRShiftDB2 endpoint and ingests the returned JSON peak list (outsider-authored free text/structured content) into the LLM-relevant processing context (converted to spectra and used for matching).