fabricks-devops-issues

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes: the runtime workflow for diagnose uses uv run issues.py get <id> to pull Azure DevOps issue data written by outsiders (ticket title/description and error text), and that free-form prose is then ingested into the agent’s LLM context for summarization/diagnosis.