alphafold-database
Warn
Audited by Snyk on Mar 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and ingests data from public third-party sources — e.g., the AlphaFold REST API at https://alphafold.ebi.ac.uk/api/, direct file URLs (https://alphafold.ebi.ac.uk/files/...), the public Google Cloud bucket gs://public-datasets-deepmind-alphafold-v4/, and the 3D‑Beacons API — and instructs the agent to parse JSON/mmCIF confidence metrics (pLDDT, PAE) and use those values to make download/analysis decisions, so external content can materially influence tool use and next actions.
Audit Metadata