mat-db-optimade

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). At runtime, the skill’s query_optimade.py fetches structure records from external OPTIMADE providers (e.g., COD/NOMAD) and ingests their JSON fields (including free-text like _cod_text/_cod_authors/_cod_title) into the agent context, which is outsider-authored content from public databases.