fda-drug-information

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to query the public openFDA API (https://api.fda.gov), including FAERS adverse event reports—a public, partly user-submitted/unverified data source—that the agent ingests and uses to drive analyses and decisions (e.g., pharmacovigilance), creating a pathway for indirect prompt injection from third-party content.