write-tickets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). In the “Audit a ticket” workflow, Step 1 requires obtaining the full current ticket content (potentially by fetching an outsider-authored issue/PR/wiki text via use-jira/use-gh/use-glab), which is then read and incorporated into the agent’s LLM context for auditing and rewriting.