drug-repurposing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly issues curl/web_search calls to public third‑party sources (e.g., DrugBank, ChEMBL, PubChem, STRING, OpenTargets, ClinicalTrials.gov, PubMed, OpenFDA) and requires the agent to read, extract, and act on that content to score and recommend repurposing candidates, which exposes it to untrusted public web content that could indirectly inject instructions.