drugbank-database

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime the skill downloads and parses DrugBank’s XML dataset (outsider-authored reference data) via drugbank_downloader.download_drugbank()/get_drugbank_root(), then extracts free-text fields like description, indication, and mechanism-of-action from that XML into the agent’s context.