tooluniverse-pharmacovigilance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to fetch and ingest open/public third‑party data (e.g., FAERS via FAERS_count_reactions_by_drug_event, DailyMed labels via DailyMed_search_spls/DailyMed_get_spl_by_set_id, PharmGKB via PharmGKB_search_drug, and literature/preprints via PubMed_search_articles and EuropePMC/BioRxiv/MedRxiv`) as mandatory inputs that the agent must read and interpret to calculate signals and drive recommendations, so untrusted third‑party content can materially influence tool use and next actions.