linear-backlog-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md requires reading documentation/specs/{feature}/tasks.md and other spec docs (outsider-authored content category: issue/spec body text not authored by the operating user) and then using that extracted free text to build Linear issue descriptions/links, which the agent’s LLM context would ingest during parsing.