state-map

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The only outsider-adjacent input is a ticket or text the user names as the proposed-change scope (SKILL.md:7, :19), which the agent fetches on request rather than reading from a feed an outsider can post into, so it is low; the repo code and spec files are the user's own and are not outsider-authored.