tooluniverse-drug-repurposing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's SKILL.md explicitly instructs runtime calls to public third‑party databases (e.g., OpenTargets_get_associated_targets_by_disease_efoId, DGIdb_get_drug_gene_interactions, drugbank_*, PubMed_search_articles, EuropePMC_search_articles, ClinicalTrials_search, FAERS, PubChem) so the agent fetches and interprets untrusted public web content which directly influences scoring, decisions, and next actions.