tooluniverse-chemical-safety

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). Yes — SKILL.md explicitly instructs the agent to fetch and parse content at runtime from public third‑party sources (e.g., PubChem, CTD, FDA drug labels, DrugBank, STITCH, ChEMBL, ADMET‑AI) and to use those retrieved, user/third‑party data to grade evidence and drive risk classifications and recommendations, so untrusted external content can materially influence tool use and decisions.