notification-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow calls list_notifications and then get_notification_details, which surface subject titles and linked issue/PR comment bodies that outsiders can create by commenting or mentioning the user on any GitHub thread, without the agent selecting a specific item first.