gherkin-ticket

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent skill references linearis issues read and replica database queries to read Jira/Linear-like external tickets, but the workflow requires the agent to explicitly pass a specific ticket ID determined by user instructions or previous steps, so outsider-authored free text is only fetched by active search rather than monitored feeds.