tooluniverse-rare-disease-diagnosis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's mandatory workflow repeatedly instructs the agent to fetch and ingest content from open/public third-party sources—e.g., Orphanet and OMIM disease searches, PubMed/BioRxiv literature searches, DisGeNET/ClinVar/gnomAD queries as shown in Phase 2 and Phase 6—and to use that untrusted external content to rank diagnoses, prioritize genes, and drive next actions, which enables indirect prompt injection.