stampede

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source text from outsider-authored issue content enters the workflow because SKILL.md instructs the workers’ briefs to “Fetch the issue from the tracker — title, body, and comments are the spec,” and then those prompts are used at runtime to generate outcomes.