contract-testing-flywheel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests outsider-authored free text when it performs idempotency “search/list” queries in GitHub Issues/Projects (gh issue list ... --search "<team> in:title") and may proceed to live creation based on matching existing issues, meaning the workflow reads titles/metadata originating from external user text.