drug-db-pubchem

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime the script calls PubChem PUG-REST and ingests outsider-authored free text from PubChem’s JSON fields (e.g., Synonym strings and IUPACName/InChI/SMILES) into the generated JSON payload that is then written/returned to the agent context; this is public web content fetched at runtime.