to-tickets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow “to-tickets” consumes “whatever is already in the conversation context” and, if the user passes “a spec path, an issue number or URL,” it will “fetch it and read its full body and comments,” which can include outsider-authored free text from places like issue/PR bodies/comments.