pubchem-database

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow calls PubChem PUG-REST/PUG-View endpoints (e.g., scripts/bioactivity_query.py → requests.get(.../assaysummary/JSON) and .../pug_view/data/compound/{cid}/JSON), ingesting outsider-authored free-text fields from PubChem’s public database into the agent’s LLM context via the returned JSON/prose.