wayfinder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md describes loading and fetching issue bodies from the repo’s issue tracker at runtime (“Load the map… fetch the full body of any related or closed issue on demand”), and those issue bodies are outsider-authored free text when written by other people.