tooluniverse-ecology-biodiversity

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow (SKILL.md) explicitly instructs the agent to fetch and read open/public third-party data (e.g., GBIF_search_occurrences for public GBIF occurrence records and PubMed_search_articles/EuropePMC_search_articles for external literature) and to use those results to drive analyses and decisions, meaning untrusted public content can materially influence tool use and next actions.