and-workflow-contract

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). This contract describes runtime reads of GitHub Issues issue bodies and comments (outsider-authored free text) as “authoritative workflow state” (e.g., State Reason comments headed ## State Reason and the Package Contract/## Implementation issue comment) that would be ingested into the agent’s LLM context.