halo-ticket-context

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required workflow, the agent uses Halo MCP tools to read third-party-authored ticket content—specifically halo_get_ticket_actions(ticket=<id>) to ingest the ticket’s full note/action history and halo_get_ticket(ticket=<id>) for ticket details—where an outsider can have posted those notes into Halo tickets.