pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The workflow explicitly instructs the agent to run gh issue list to check for an associated GitHub issue (user-generated, public third-party content) and to read/infer context from it, which the agent would interpret and could change PR creation decisions.