tooluniverse-biomedical-fact-lookup

The wrapper module itself appears to be a test harness, but it dynamically executes Python code extracted from a package-local Markdown file (SKILL.md) using unsandboxed exec(). This is a significant supply-chain/execution risk: if SKILL.md is tampered with (malicious update, compromised release/build, or package modification), arbitrary code can run at import/runtime. The presence of domain-focused assertions does not mitigate the risk of malicious top-level snippet side effects during exec.