boards-team-active-work

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider-authored free text is ingested via Azure DevOps work item fields (e.g., System.Title) returned by the wit_backlog/wit_work_item get_batch tool calls, which can include titles authored by other users; these titles are then rendered into the agent’s LLM context for display.