light-kanban-worker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s required runtime workflow reads free text fields from board-supplied tasks (e.g., “Read task + project instructions”, including title, description, tags, reviewFeedback, and “Follow the host and project's existing instruction priority”) via GET /api/tasks?status=in_progress, GET /api/tasks?status=todo, and then loads AGENTS.md/README-like project files from the claimed task workspace, where those task/project texts are outsider-authored and are consumed by the worker without first selecting a specific trusted item.