get-plan-comments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Within the required runtime workflow, get-plan-comments calls mcp__baz__get_plan_comments to read teammates’ Baz plan review comment bodies and replies (outsider-authored text submitted to those plans/threads), then uses that free text for assessment and conditional action.