mat-db-nist-janaf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow fetches public NIST WebBook HTML at runtime (via requests.get in search_formula() and get_thermo_data()), then parses the page text with BeautifulSoup and extracts table cell strings into the JSON that is subsequently used by the agent—this is outsider-authored free text from public web content.