pdb-database

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly fetches and parses public, user-submitted PDB entries from open RCSB endpoints (e.g., https://files.rcsb.org/download/{PDB_ID}.pdb and https://data.rcsb.org/rest/v1/...), and the examples show the agent reading and interpreting that content (sequence/ligand metadata) as part of workflows, so third‑party content can materially influence actions.