implement-fanout

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md directs the skill to “Read the open tickets from the issue tracker” and spawn agents with “Implement — read ticket #N from the tracker”, meaning outsider-authored issue/ticket body text (from other contributors) is ingested into each agent’s LLM context via the ticket-frontier/briefform path.