disease-investigation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow explicitly permits and instructs calling a web search after MCP retrievals ("Principle 5: Web Search Tool Usage" and accompanying Query Strategy) to retrieve open/public web content and integrate those results into the report, meaning untrusted third-party pages can be read and used to drive decisions.