drug-potential-assessment

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md Phase 2, the agent uses user-provided text from “适应症/靶点/研究领域”等输入 to drive multiple tool calls (e.g., mcp_virtual-mcp-pharma-intelligence__ls_drug_search, ls_patent_search, ls_paper_search, ls_clinical_trial_search) that then ingest and summarize outsider-authored free text contained in patents/papers/clinical records returned by those searches.