triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested via gh issue view <n> --json comments --jq '.comments[] | select(.author.login=="bitbonsai") | .body' (public/authenticated GitHub issue/PR comments authored by others), which is then fed into the Draft/Review sub-agents as “failing log/issue body”.