omicverse-single-cell-cellvote-consensus

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow builds LLM prompts from adata.obs[celltype_keys] (e.g., obs['scsa_annotation'], obs['gpt_celltype'], obs['gbi_celltype']) and passes those unmodified candidate labels into cv.vote(...) via the module-level omicverse.single._cellvote.get_cluster_celltype, so outsider-authored free text can be injected if the user supplies/loads those obs columns.