requirements-enricher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes: the required workflow calls MCP read_issue and list_issue_comments to ingest the outsider-authored GitLab issue description and comment bodies (free text authored by someone other than the operating user) into the agent’s LLM context for summarization and gap analysis.