tooluniverse-infectious-disease

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's mandatory workflow and citation requirements (Phase 5: "Literature Intelligence" and CHECKLIST) explicitly instruct the agent to fetch and ingest open/public sources — e.g., PubMed, EuropePMC/bioRxiv/medRxiv, arXiv, web_search and clinicaltrials.gov — and to synthesize those findings into drug-ranking and recommended actions, creating a clear path for untrusted third-party content to influence tool use and decisions.