user-activity-report

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads external GitHub PRs, commits, Slack threads, Confluence/document search results, and Jira tickets associated with a colleague, exposing the agent to potential indirect prompt injection from outsider-authored content across those communication and code platforms.