clinicaltrials-database

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill fetches and ingests public, user-provided content from the ClinicalTrials.gov API v2 (e.g., https://clinicaltrials.gov/api/v2/studies and NCT-specific endpoints used by get_study_details) — including free-text fields like eligibilityCriteria and brief_summary — which the agent is expected to read and could contain untrusted, user-generated instructions.