triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required workflow explicitly reads outsider-authored ticket content (e.g., “Read the full ticket (body, comments, labels, reporter, dates)” and “read any prior triage notes”) from external trackers at runtime, which becomes LLM-readable prose in the agent’s context.