write-issue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow can fetch and read existing GitHub issue bodies at runtime via gh issue view ... --json body in scripts/audit_issue_bodies.py, and those bodies are outsider-authored free text (other users’ issue content) that is then processed and potentially surfaced to the agent.