arc-bug-fixer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md Step 1/Step 2 requires fetching a bug ticket’s full body (e.g., GitHub gh issue view <number> --comments) and parsing its free-form “Summary/Steps/Research Notes/Recommended Fix,” which is outsider-authored text read at runtime from public/authored issue comments into the agent’s LLM context.