tooluniverse-drug-mechanism-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly requires fetching and parsing public third‑party content (e.g., PubMed/EuropePMC articles, DailyMed FDA labels, KEGG/Reactome/WikiPathways/STRING entries, ChEMBL/OpenTargets/PharmGKB data) as part of its mandatory Phase 5–7 workflow and uses that content to drive integration and report decisions, which exposes the agent to untrusted external text that could carry indirect prompt-injection payloads.