issue-authoring

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow runs search_issues (step 1, which returns outsider-authored issue titles) and issue_read on existing issues (step 2, which returns outsider-authored bodies and comments), so any GitHub issue reading exposes the agent to outsider free text without a separate selection step.