wayfinder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow explicitly loads a repo issue tracker “map” and, when working tickets, “fetch[es] the full body of any related or closed ticket on demand,” meaning outsider-authored GitHub/GitHub-like issue text entered by repo users is ingested at runtime via the tracker issue/ticket bodies.