tooluniverse-drug-repurposing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly calls and ingests open/public third-party content (e.g., PubMed_search_articles, EuropePMC_search_articles, ClinicalTrials_search, FAERS_search_reports_by_drug_and_reaction, DrugBank/ChEMBL/DGIdb queries) as shown in SKILL.md and EXAMPLES.md, and those external results are read and used to compute scores and drive repurposing recommendations—so untrusted third‑party content can materially influence agent actions.