plan-ticket

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In Step 1 “Intake and Classify” and Step 2 “Research”, the workflow reads ticket details (key/description/acceptance criteria) from the tracked ticket via the external tracker skill, and that outsider-authored ticket content is then ingested and fed into the critic panel prompts in Step 5.