wayfinder-plus

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow includes loading and “fetch[ing] full bodies of related or closed tickets on demand” from an external issue tracker (Linear/GitHub), so outsider-authored free text from issue/ticket bodies can be ingested into the agent’s LLM context via those runtime reads.