tooluniverse-clinical-trial-matching

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow clearly queries public ClinicalTrials.gov (via search_clinical_trials and get_clinical_trial_eligibility_criteria) and other open resources (PubMed, OpenTargets, CIViC, FDA) and explicitly parses free-text trial descriptions and eligibility criteria from those public records to drive scoring and recommendations, exposing the agent to untrusted third-party content that can influence actions.