tooluniverse-disease-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly directs the agent to call many public, third‑party data sources (e.g., tu.tools.PubMed_search_articles, tu.tools.clinvar_search_variants, tu.tools.openalex_search_works, MedlinePlus, OpenTargets, Europe PMC) to ingest literature and database content and then use those results to progressively update the report and drive subsequent queries, so untrusted external content can materially influence the agent's actions.