drug-candidate-discovery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly requires running web searches (TOOLS["web_search"]) and parsing arbitrary web search results to extract UniProt and PDB IDs (and falls back to scraping web pages), and those untrusted third‑party results are used to choose PDB entries and drive subsequent downloads and generation steps, so external content can materially influence tool use.