afk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow (“Pick the highest priority ready-for-agent issue” and “Implement the work described the issue”) implies the agent will fetch and ingest outsider-authored issue tracker text (an external issue description authored by other people) into the LLM context at runtime.