ticket

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill ingests the operating user’s ticket text (which may include outsider-authored issue/PR/wiki content) and then reads it into the agent context via the “Input” step (“Ticket ID + paste/description” or “Full ticket text” / “Link to issue (read description if accessible)”).