acceptance-orchestrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow’s “Intake” step (“Read issue and extract task goal + DoD”) ingests the body text of an issue provided via the required input (“issue id or issue body”), which is outsider-authored free text from a tracker/discussion thread not authored by the operating user.