single-cell-annotation-skills-with-omicverse

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs downloading and ingesting public third-party files (e.g., the MetaTiME Figshare dataset https://figshare.com/ndownloader/files/41440050 and the Cell Ontology JSON http://purl.obolibrary.org/obo/cl/cl.json) and then mapping/using their contents (via CellOntologyMapper, gptcelltype, CellVote, etc.), so untrusted external content is read and can materially influence annotation decisions and downstream tool use.