disease-investigation-zhcn

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow runs Patsnap MCP database queries, which are curated structured data, but its web-search fallback (triggered when database results are insufficient or the user asks for the latest information) makes the agent fetch arbitrary outsider-authored web pages, so an attacker can publish poison but cannot force delivery.