epidemiology

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs data characterization ("Identify data source") and lists public third‑party databases under "Key Databases and Tools" (e.g., WHO Global Health Observatory, Our World in Data), indicating the agent is expected to ingest and act on open public web data that could carry untrusted, user-generated instructions.