wayfinder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime workflow explicitly fetches and “fetch[es] the full body of any related or closed ticket on demand” and loads ticket/map content from the repo issue tracker, which can include outsider-authored issue/ticket text (e.g., public/external contributors), and that readable prose is ingested into the agent context during ticket resolution.