work

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source /work-items:work reads provider work-item data (via the tracker seam operations list-frontier, list items, resolve item ID, etc.) that are sourced from outsider-authored issue/ticket content in the bound provider (e.g., GitHub issues/PRs), so free text from outsiders can be ingested at runtime before selection/dispatch.