wayfinder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md runtime path “Work through the map” step 3/4/6 explicitly fetches full bodies of related/closed tickets from the repo issue tracker (outsider-authored issue text) and then posts/derives “resolution comments” and updates “Decisions-so-far”, which can place that fetched free text into the agent’s LLM context for reasoning.