analytics

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Yes—this workflow calls GitHub search/read tools at runtime (e.g., PR/issue search and PR file listing), and the resulting PR/issue content (including titles/body/comments authored by non-operating users) is ingested into the agent’s context to compute analytics and generate the report.