work-next-issue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow uses GitHub CLI to read the provider’s issues—specifically it lists issues with gh issue list ... --json number,title,body,labels,assignees,url and then reads each chosen issue’s body via gh issue view "$N" ...—so outsider-authored free text from GitHub issue titles/bodies is ingested.