drug-lifecycle-evaluation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow, the agent takes user-provided free text (the drug name and related parameters) and passes it into multiple MCP search/query steps (e.g., ls_ner_nor_normalize, ls_drug_search, ls_news_vector_search, ls_paper_vector_search, and patent.search) whose results are then ingested to produce the report.