rfdiffusion-nim

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime POST requests to the hosted/local generate endpoints ingest outsider-provided free text in the JSON fields input_pdb (inline PDB content) and contigs/hotspot_res (DSL strings) without requiring prior selection of a specific trusted item.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). This skill instructs a docker login to nvcr.io and a docker run of the remote image nvcr.io/nim/ipd/rfdiffusion:2, which will fetch and execute remote code at runtime (nvcr.io/nim/ipd/rfdiffusion:2).