issue-fields-migration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow ingests outsider-authored free text from GitHub Project V2 item field values (e.g., TEXT/SINGLE_SELECT option names) via the MCP tools mcp__github__projects_list(..., method: "list_project_items"), which returns project item field content that the agent then places into its LLM context for preview/mapping and migration decisions.