datamol

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). Datamol's I/O explicitly supports remote/HTTP and cloud paths via fsspec (see references/io_module.md and examples like dm.read_csv("https://example.com/data.csv") and dm.read_sdf("s3://bucket/compounds.sdf")), so the agent can fetch and parse arbitrary public/user-provided files which are untrusted third‑party content used in its workflow.