multica-working-on-issues

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s runtime workflow reads Multica’s linked-PR list via multica issue pull-requests <issue-id> --output json, which is populated by Multica’s webhook scans of GitHub PR title/body/branch text provided by outside users but the workflow consumes only structured fields from Multica’s own API response.