wayfinder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md “Work through the map”, the workflow loads a repo issue tracker “map” and can “fetch the full body of any related or closed ticket on demand” (including the ticket body text the user may have posted into the tracker), so outsider-authored free text from issue/ticket submissions is read at runtime.