tooluniverse-precision-oncology

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly queries and ingests data from public third-party sources (e.g., CIViC, COSMIC, GDC/TCGA, DepMap, cBioPortal, Human Protein Atlas, PubMed/BioRxiv/MedRxiv, ClinicalTrials.gov/OpenTrials) as required steps in its Phase 2–5 workflow, and those external results are directly used to drive treatment recommendations and subsequent tool actions, so untrusted external content could indirectly inject instructions or influence behavior.