triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The triage required workflow reads outsider-authored free text from tracker items at runtime—specifically “Read the item body, comments, and any linked PRs; for a PR, the diff too” during step 1/gather context for /work-items:triage, where external/untriaged issues/PRs carry the raw marker and are ingested without preselecting a specific content item beyond the triaged item itself.