atlas-wayfinder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow loads the map and its child ticket issues from the repo's configured issue tracker (e.g., GitHub issues, where outsiders can open issues and comment), and reads them as context during "Work through the map," which is an ingestion path that doesn't require the agent to select a specific outsider item.