afk-to-tasks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow can fetch and read an outsider-authored issue body/comments from an issue tracker when the user passes an issue URL/number/path, and that fetched free-form text is then used as LLM context (“fetch it from the issue tracker and read its full body and comments”).