ticket-requirements-gathering

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required Setup workflow reads the ticket, its parent Epic/story, and related PRs from the tracker and repository host, and outsiders can typically comment on or file tickets and PRs that this workflow ingests without the agent selecting a specific item.