scrna-celltype-annotation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly requires calling public literature MCP tools (e.g., pubmed_search, pubmed_get_details, openalex_search/openalex_get_work) and reading/extracting article text/figures to determine cluster annotations and generate recode code, so the agent ingests and acts on open/public third‑party content (PubMed/OpenAlex) as part of its workflow.