herdr-issue-coordinator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The coordinator and workers read and ingest GitHub-authored issue/PR text at runtime via herdr agent read ... --source recent-unwrapped, including “issue, repository instructions, parent issue, sub-issues, declared dependencies, project board, issue state, and linked open or merged pull requests,” which are outsider-submitted in most attacker models.