tooluniverse-sequence-retrieval

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests public records from NCBI and ENA (see "Phase 2: Data Retrieval" and the tool calls like tu.tools.NCBI_get_sequence / ena_get_sequence_fasta in SKILL.md), expects the agent to read and reconcile those untrusted, user-submitted database entries, and to use their contents to choose accessions and drive reporting/fallback decisions—so third-party content can materially influence actions.