issue-coordinator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime path reads arbitrary outsider-authored free text from GitHub issues/PRs (e.g., “Read the repository instructions, parent issue, native sub-issues, … linked open or merged pull requests” and worker contract “Read the issue, repository instructions, relevant design, code, tests, and dependency pull requests”).