ticket-up

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the required runtime workflow can ingest outsider-authored GitHub Issue text at runtime by reading existing issues/sub-issues and their issue bodies (including ticket bodies) when the venue is GitHub Issues, so an outsider can submit free text into that store for the LLM to process.