to-issues

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow explicitly fetches an outsider-authored issue (issue number/URL/path) and reads its full body and comments, which are free-form text authored by others, then feeds that text into the agent’s LLM context during “Gather context.”