biotech-pipeline-landscape

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill provides detailed, step-by-step procedures for sequence-based patent FTO searches and explicit "design-around" strategies to evade IP coverage, which is potentially suspicious guidance though not clearly malicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 该 Skill 的 Phase 5（以及修订规则）会通过 files.cat 读取“用户提供的修改意见文档（.md/.docx）”的自由文本用于生成/迭代 HTML 报告，并进一步触发逐条落实逻辑，因此存在让外部作者文本在运行时被模型直接摄入的间接提示注入面。