pubchem-database
Warn
Audited by Snyk on Mar 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill explicitly fetches and processes open/public third‑party data from PubChem (e.g., PUG-REST endpoints like /rest/pug/compound/{cid}/assaysummary/JSON and PUG-View /rest/pug_view/data/compound/{cid}/JSON) as part of required workflows, so external textual annotations and assay results could materially influence tool actions such as selecting or filtering compounds.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata