execute-action

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow in execute-action consumes an orchestrator-provided free-text description for each action and executes it via tools (e.g., email/Linear/comment), so outsider-authored instruction-like text can be injected through the action payload without the worker first selecting a specific item.