medical-affairs-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly requires ingesting and acting on open/public third‑party content — e.g., "Signal detection: Literature monitoring, social listening" in §1.3 and "Literature Search: PubMed, clinical trial registries, guidelines" in Scenario 4 — where external literature and social media insights are read, interpreted, and used to drive medical responses and safety/crisis actions, creating a clear avenue for indirect prompt injection.