reproduce

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes: the workflow runs gh issue view ... --json title,body,labels,comments and then “Read it carefully” to extract the issue’s free-form body/comments, which are outsider-authored text that becomes LLM-readable context for subsequent reasoning.