printing-press-retro

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly reads public, user-generated GitHub data (see references/issue-template.md Step 2.5: the "Fetch open retro issues" gh issue list / EXISTING_OPEN_RETROS and the label checks in Step 1) and uses those titles/content to deduplicate and decide whether to create or comment on issues, so untrusted third-party content is ingested and can materially influence the agent's next actions.