to-tickets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). [Exclusion] The runtime workflow only writes/creates tickets (local markdown files or real issue-tracker issues) and reads from the existing conversation context or user-provided references, but it does not specify that it ingests arbitrary outsider-authored free text from an external monitored feed/queue without the user first selecting/providing a specific item to fetch.