cellxgene-census

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow uses the public CELLxGENE Census dataset via cellxgene_census.open_soma() and subsequent reads/queries (get_obs, get_anndata, axis_query), which ingests outsider-authored dataset metadata/content (e.g., cell/dataset fields) into the agent’s LLM context if the agent summarizes or prints results.