playwright-java-release

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow uses gh api ... issues/$ISSUE --jq '.body' to fetch the private microsoft/playwright-internal issue body at runtime and then edits and writes it back; that issue text is outsider-authored (not by the operating user/org being the prompt author) and is ingested as free text into the agent context via /tmp/body.md.