wayfinder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a workflow where the agent loads an issue tracker “map” and then “pulls … any relevant or already closed ticket” to generate resolution comments, meaning outsider-authored text in issue titles/bodies and comments is ingested at runtime.