acceptance-orchestrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow explicitly ingests “issue id or issue body” and “issue status” during the Intake/Issue gate steps, and issue body text is typically outsider-authored (e.g., from a public/third-party issue tracker or by someone other than the operating user), which would be read as free-form prose and fed into the agent’s LLM context.