to-tickets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s runtime workflow ingests only existing conversation context (and optionally fetched reference specs/issues/URLs provided as arguments) to draft tickets, and it does not describe continuous monitoring or reading of outsider-authored feed content without the agent first selecting a specific referenced item.