discussion-participation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow lists open GitHub Discussions with list_discussions and then reads each original post and all comments and nested replies via get_discussion and get_discussion_comments, so any outsider who can post a discussion or comment in a public repo places free text the agent ingests without selecting a specific item.