tooluniverse-rare-disease-diagnosis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly instructs the agent to fetch and interpret open/public third‑party content (e.g., Orphanet via Orphanet_search_diseases, OMIM_get_entry, PubMed_search_articles, BioRxiv/MedRxiv via EuropePMC, DisGeNET, OpenAlex, ClinVar, gnomAD, CADD/AlphaMissense/EVE, CELLxGENE, ChIPAtlas, etc.), and that external content is used to drive diagnosis, gene prioritization, variant classification, and next actions—therefore untrusted web content is ingested and can materially influence tool use and decisions.