tooluniverse-drug-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's SKILL.md explicitly requires querying and ingesting open public sources (e.g., FAERS via FAERS_count_reactions_by_drug_event, ClinicalTrials.gov via search_clinical_trials, DailyMed SPLs, PubMed/ChEMBL), including user-submitted FAERS reports and public web data, and directs the agent to interpret those results to drive safety assessments, phase counts, and follow-up tool actions—therefore exposing the agent to untrusted third-party content that could enable indirect prompt injection.