tooluniverse-drug-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's mandatory workflow repeatedly requires fetching and parsing content from open public third‑party sources (e.g., DailyMed, PubMed/EuropePMC, ClinicalTrials.gov, FAERS, PubChem, ChEMBL) and instructs the agent to read and act on those results to drive tool calls and report decisions, which exposes it to potential indirect prompt injection.