tooluniverse-precision-oncology

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly instructs the agent to fetch and ingest public third-party content (e.g., CIViC, COSMIC, GDC/TCGA, PubMed/BioRxiv, ClinicalTrials.gov, cBioPortal, DepMap, Human Protein Atlas) in Phases 2–5 and to use that content to generate treatment recommendations and trial matches, so untrusted external data can directly influence decisions and tool actions.