wayfind

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). /planning:wayfind (context/tracker-mechanics.md) reads GitHub Issues content at runtime via gh issue list/gh issue view for the map issue and its sub-issues (titles/bodies/labels/comments used to compute the frontier and pointers), and those issue texts can be authored by outsiders.