multitask

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow (“Read each ticket and the code it likely touches”) implies the agent ingests outsider-authored ticket text (e.g., issue/PR/discussion content written by others) into the worker’s runtime prompt, creating an indirect prompt-injection path.