dev-orchestrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The dev-orchestrator skill only ingests the outsider-authored free text from the user’s own prompt (and optionally prepends MCP-fetched issue ticket descriptions/acceptance criteria), not from arbitrary external web pages/feeds or outsider-written repository issue text that the required workflow fetches without an explicit item selection path.