twg-jira-resolve-merged-work

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md step 1/6/8 the workflow hydrates Jira workitems/peers and then searches and reads merged PRs (via TWG/Jira/query commands) and uses their title/description/commit text/linked metadata as evidence, meaning outsider-authored free text from user-submitted PR/I ssue/commit fields can be ingested at runtime.