om-auto-fix-issue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill workflow ingests issue descriptions, tracker comments, and pull request bodies/diffs via tracker operations such as get-issue and search-prs, exposing the benign agent to outsider-authored free text.