rightcode-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to "Query the issue tracker" and "Read the full issue (body, comments, labels, reporter, dates)" in SKILL.md (Step 1: Gather context), which means it ingests user-generated, potentially untrusted issue/comments that the agent must interpret to make triage decisions — enabling indirect prompt injection.