tooluniverse-rare-disease-diagnosis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's mandatory workflow (e.g., Phase 2 "Disease Matching" and Phase 6 "Literature Evidence") explicitly instructs the agent to fetch and interpret open/public third‑party sources such as Orphanet, OMIM, DisGeNET, PubMed/BioRxiv, ClinVar and gnomAD, and uses those results to drive diagnoses, gene prioritization, variant classification and next actions, which exposes the agent to untrusted public content that could carry indirect prompt injection.