wayfinder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads “map” and then fetches full bodies of “related or closed ticket[s]” from the repo’s issue tracker (tracker-specific queries), meaning outsider-authored free text in issue/ticket bodies can be ingested when the agent loads the frontier and zooms into ticket content.