fda-consultant-specialist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow explicitly instructs searching public FDA databases (SKILL.md: "Search 510(k) database for predicates") and monitoring public vulnerability sources including the NVD, ICS‑CERT, security mailing lists and researcher reports (references/device_cybersecurity_guidance.md), which are open third‑party sources that can contain untrusted/user‑generated content the agent would be expected to read and that could materially change decisions (e.g., patching, submission strategy).