tooluniverse-systems-biology

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In python_implementation.py, outsider-provided fields gene_list, protein_id, and particularly pathway_keyword directly drive runtime calls to external database search endpoints (e.g., kegg_search_pathway(keyword=...), WikiPathways_search(query=...), pc_search_pathways(keyword=...), biomodels_search(query=...)) whose returned text is then written into the report, so poison text from untrusted users can be ingested as free-text search terms without selecting a specific preapproved item.