clinicaltrials-database

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill calls ClinicalTrials.gov’s public API at runtime (requests.get to https://clinicaltrials.gov/api/v2/studies and /studies/{nct_id}), and the returned JSON includes CommonMark rich-text fields (e.g., descriptionModule.briefSummary, eligibilityModule.eligibilityCriteria) that are outsider-authored and become LLM-readable context when the agent uses them.