retro

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can enter the LLM context via gh issue list / gh pr list JSON fields like title (and potentially other text) from GitHub issues/PRs authored by others; these titles are then assembled into the report body that the agent’s LLM generates.