repro-issue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the workflow, the agent must fetch and read the full body and comments of a public GitHub issue/PR at runtime via gh issue view <N> --repo mapbox/mapbox-gl-js --comments, which is outsider-authored free text (issue reporter comments/snippets) and is ingested directly.