power-ui

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider free text can enter the LLM context via the runtime “Ask AI” flow: the UI builds a prompt string using title/id from list items (e.g., askAI(navigate, \Tell me about: "${title}" (ID: ${id})`)`), and those item fields are typically sourced from external/outsider-authored content (e.g., ingested issues/messages) that the user did not author.