tooluniverse-rare-disease-diagnosis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests user-provided free text symptoms/variant identifiers (e.g., “symptom_keywords” and “variant_hgvs”) and then uses them to query external sources (HPO_search_terms, Orphanet_search_diseases, OMIM_search, ClinVar_search_variants), so an outsider can submit arbitrary text into the workflow input.