tooluniverse-rare-disease-genomics

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to fetch and ingest content from public third‑party sources (Orphanet, GenCC, ClinVar, EuropePMC, ClinicalTrials.gov, OLS, HMDB) as core parts of Phases 0–8 and example workflows, and that external content is read and used to drive tool choices and conclusions—creating clear exposure to untrusted public web content that could enable indirect prompt injection.