babysit-babysitter-issues

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md:23-27 instructs the agent to pass an outsider-authored GitHub issue URL into /babysitter:yolo, which (as part of “work on this GitHub issue”) will typically fetch and ingest the issue’s body/comments (free text authored by non-operating-user parties) into the LLM context.