wayfinder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). [The required runtime workflow loads the repo’s issue tracker “map” and then selects and resolves child ticket bodies, with “fetch the full body of any related or closed ticket on demand,” meaning outsider-authored free text in issues/comments is ingested by the LLM at runtime.]