paperclip-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Paperclip Triage reads “the target issue or issue list” at runtime (including free-text fields like description, acceptance criteria, blockers/comments, and the plan document), so outsider-authored issue content can be ingested into the LLM without selecting a specific item beyond the already-chosen issue(s).