wayfinder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow reads the repo’s issue tracker “map” and then fetches full bodies of related/closed child tickets at runtime (SKILL.md:116-119), where those issue bodies/comments are outsider-authored relative to the operating user and can contain free text prompt-injection payloads.