soloscrum-tracker-github-add-dependency

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). At runtime the workflow uses gh issue view <issue_number> --json body to read the dependent issue’s existing body (authored by an outsider on GitHub, i.e., non-operating-user text) and then re-injects it into the LLM context for modification before calling gh issue edit.