github-issue-planner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The workflow fetches outsider-authored GitHub issue title/body/labels and comments at runtime via scripts/fetch_github_issues.py and writes them into run-dir/issue-<number>.json, which is then read and embedded into the generated plan markdown as ## Issue Claims (Untrusted) by scripts/scaffold_issue_plan.py (indirect prompt-injection risk).