tcga-bulk-data-preprocessing-with-omicverse

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests user-provided local GDC download artifacts (e.g., gdc_sample_sheet.<date>.tsv and clinical.cart.<date>/ XML/JSON) via ov.bulk.pyTCGA(sample_sheet_path, download_dir, clinical_dir) and then runs adata_init()/adata_meta_init()/survial_init(), so outsider-authored free text can be read if an attacker can place poisoned files into those directories.