redmine-agent-ready-tickets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). In SKILL.md the workflow instructs capturing each Redmine issue’s full description/comments/attachments and “reopen every changed issue”; if those issue bodies are fetched and then included verbatim in the agent’s LLM context, that is outsider-authored free text originating from Redmine issue authors (authenticated but not the operating user), creating an indirect prompt-injection path.