triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads outsider-authored GitHub issue text at runtime by inspecting open GitHub issues for the ogulcancelik/herdr repository via gh issue list/gh issue view (or GitHub MCP tools), which necessarily ingests issue bodies/comments authored by external users.