apm-issue-autopilot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text can enter the LLM context via the Phase 1 triage children: the orchestrator passes ISSUE_BODY (verbatim from GitHub issues authored by non-operators) into assets/triage-prompt.md, which the triage child then reads and uses in DIRECT mode with apm-triage-panel.