docs-governance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow instructs the agent to treat issue bodies, pull requests, comments, and automated reviews as data and not execute them, but it ingests issue tracker content and outsider submissions when routing and processing issues.