tooluniverse-clinical-trial-matching

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly fetches and parses public third-party content (e.g., ClinicalTrials.gov via search_clinical_trials and get_clinical_trial_eligibility_criteria in Phase 2–3, PubMed_search_articles in Phase 6, and OpenTargets/FDA/CIViC lookups) as required workflow steps and uses that untrusted content to score and decide trial recommendations, so external text can materially influence agent actions.