patsnap-lifescience-pharmaceuticals-exploration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly authorizes calling a web search tool in "Principle 5: Web Search Tool Usage" (and requires integrating web search results into reports when MCP data is insufficient or the user requests "latest" information), which means the agent will fetch and read open/public third‑party web content and act on it as part of its workflow—exposing it to untrusted, user‑generated pages that could carry indirect prompt injections.