to-tickets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow explicitly says that if the user passes an issue number or URL as an argument, it will fetch and read the full body and comments (i.e., ingesting outsider-authored text from an external issue/comment thread) during “Gather context.”