sec-track

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required duplicate check in step 2 runs gh issue list --state all --search "<id>" against the repository's GitHub issues, which reads issue titles and matched content that outside reporters can write, so this is a GitHub issue read the workflow performs without selecting a specific item.