openbio

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly queries and ingests open/public third‑party content (e.g., search_pubmed/fetch_full_text, biorxiv_search_keywords, arxiv_search, search_literature/OpenAlex, PubChem/ChEMBL, GEO/ClinVar/ClinicalTrials endpoints) and the agent is expected to read and interpret those returned abstracts, preprints, database entries and files, which exposes it to untrusted user‑submitted/public content.