tooluniverse-drug-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's mandatory workflow directs the agent to fetch and ingest content from open public sources (e.g., FAERS, ClinicalTrials.gov, PubMed, DailyMed, PubChem, ChEMBL) — including user-submitted FAERS reports and free-text literature/registry entries — and to read/interpret those results to drive report content and follow-up actions, which creates a clear avenue for untrusted third-party content to indirectly influence the agent.