biodiversity-data-guide

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs querying and ingesting public biodiversity APIs (e.g., GBIF via pygbif occ.search, iNaturalist, GenBank, and WorldClim downloads) and using those user-sourced occurrence records in downstream workflows (SDMs, model fitting), so untrusted third-party content is read and can materially influence actions.