to-tickets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow can fetch and read outsider-provided reference content (“spec path, issue number or URL… fetch it and read its full body and comments”), which then becomes part of the agent’s runtime LLM context (indirect prompt injection risk from web/issue/wiki comment text).