tooluniverse-systems-biology

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow calls multiple public pathway/database tools (e.g., tu.tools.WikiPathways_search(query=pathway_keyword, ...), tu.tools.pc_search_pathways(...), tu.tools.biomodels_search(...), and tu.tools.Reactome_map_uniprot_to_pathways(...)) and then injects the returned pathway names/descriptions/IDs into the LLM context via the generated markdown report; these tool responses are outsider-authored web/database content.