biopython

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly fetches and parses content from public third-party resources (e.g., Bio.Entrez calls to NCBI PubMed/GenBank and Bio.Blast.NCBIWWW.qblast to NCBI BLAST, plus PDB downloads via Bio.PDB.PDBList), which are open/public, potentially user-submitted/untrusted, and are read and interpreted by the agent as part of its workflow.