apm-issue-autopilot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In assets/triage-prompt.md (Phase 1), a triage child reads outsider-authored GitHub issue free text (ISSUE_BODY) and linked references in DIRECT mode to produce the autopilot-triage-decision JSON, so an outsider can poison via issue content the workflow ingests without first selecting a specific item beyond the queue/list.