Searching Scientific Literature

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to call NCBI PubMed eutils APIs (e.g., https://eutils.ncbi.nlm.nih.gov/entrez/eutils/esearch.fcgi and esummary/efetch) to fetch abstracts and metadata which the agent reads and uses to decide which papers to evaluate, exposing it to public third‑party content that could embed instructions influencing behavior.