dispatch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly instructs the agent to fetch and read existing GitHub Issue comments (e.g., "gh issue view --comments") — public, user-generated content that the agent will interpret to make triage/labeling and investigation decisions, creating a clear vector for indirect prompt injection.