linear-planning

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In project/ticket/audit modes, Phase 2 (search & dependencies) reads existing Linear issue/project text via MCP calls like list_issues/get_issue (and Phase 1/3 similarly use existing meeting transcript content), meaning outsider-authored content submitted into those Linear objects can be ingested without selecting a specific item.