supervise-this

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes that during resume, recovery, and execution the supervisor reconstructs and inspects state from GitHub issues/tickets and “ticket and branch evidence” and “evidence comments/commit state”, which are outsider-authored free text (issue bodies/comments) read into the runtime via the GitHub ticket/evidence reconstruction paths.