target-drug-report

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md workflow explicitly runs TOOLS["web_search"] to fetch clinical trial and paper results (e.g., queries against ClinicalTrials.gov and PubMed as listed in references/data_sources.md), and those external, public sources are read and used to generate report content and recommendations—so untrusted third‑party content can influence agent decisions.