Workflow Automator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly requires analyzing user-generated GitHub issue content in the "Issue Triage" workflow (and also lists Playwright MCP for browser "scraping" of public sites in Integration Points), which means the agent ingests untrusted third‑party content that can influence actions like labeling, assignment, or further automation.