to-issues

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly instructs the agent to "fetch it from the issue tracker and read its full body and comments" when given an issue reference, which ingests user-generated, potentially untrusted issue tracker content that can influence subsequent issue creation and tool actions.