tooluniverse-drug-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's mandatory workflow in SKILL.md requires automated fetching and parsing of open public sources (e.g., PubChem_get_CID_by_compound_name, DailyMed_search_spls, FAERS_count_reactions_by_drug_event, search_clinical_trials, PubMed_search_articles) and explicitly directs the agent to read and act on that third‑party content to drive analyses and report-writing, so untrusted/public content could materially influence tool use and enable indirect prompt injection.