wayfinder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the agent loads the repo issue tracker “map” and may fetch full bodies of related/closed child issues on demand (“fetch the full body of any related or closed ticket on demand”), meaning outsider-authored GitHub/Jira issue text can be ingested via ticket bodies.