omicverse-single-cell-cellvote-consensus

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill shows and accepts an explicit api_key parameter (e.g., api_key='sk-...') and instructs online runs to supply a valid API key, which encourages embedding or handling secret values verbatim rather than keeping them solely in protected env/config, creating an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Online arbitration in cv.vote(...) uses the LLM prompt built from candidate labels drawn from adata.obs[celltype_keys] (which may include outsider-authored free text), so at runtime those candidate strings can be included in the LLM context via the default omicverse.single._cellvote.get_cluster_celltype flow.