triage-issue-reports

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Source text is ingested only from a configured Slack thread (read the root and current replies, then post one verdict back to the same thread) and workers are constrained to read-only findings, with no mechanism described for fetching arbitrary outsider-authored text without selecting the specific Slack item from the trigger.