om-auto-manage-issues

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads existing tracker issues and issue comments via search-issues, get-issue, and list-issue-comments, which allows outsider-authored issue bodies, comments, and screenshots to be ingested by the agent.