scientific-human-protein-atlas

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime path: the skill fetches public web JSON from https://www.proteinatlas.org/{ensembl_id}.json / /{gene_name}.json via requests.get(...), and then parses readable fields (e.g., gene descriptions, prognostic text, subcellular location metadata) into the agent’s context—this is outsider-authored public web content.