pubmed-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly fetches and ingests open/public third‑party content from NCBI PubMed (see SKILL.md steps using BioPython Entrez: Entrez.esearch/Entrez.efetch and links like https://pubmed.ncbi.nlm.nih.gov/{pmid}/), and the agent reads and summarizes those articles as part of its workflow, so external content could influence its subsequent actions.