tooluniverse-network-pharmacology

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests user-provided free-text parameters (e.g., entity drug/disease/target names) and passes them into multiple “search”/retrieval tool calls (e.g., OpenTargets, PubMed, EuropePMC, CTD, clinical trials) without any prior requirement to select a specific pre-existing item, so outsider-authored poison in those fields can propagate into the model’s readable inputs.