managing-tickets-and-tasks-in-plane

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow for this skill includes the pre-prompt hook calling the Plane REST API to fetch issue JSON (e.g., GET .../issues/?state=in-progress in hooks/pre-prompt.sh), and that issue descriptions/titles are then surfaced into the agent’s prompt context as “urgent ticket available” / “current context” text—i.e., outsider-authored free text from Plane board content.