drug-drug

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md workflow (Step 1: Literature Search) explicitly instructs the agent to perform real-time retrieval from public sources (PubMed, CrossRef, General WebSearch, FDA/DailyMed) and to read/interpret those results to drive evidence appraisal and reporting, exposing the agent to untrusted third-party web content that can influence its actions.