pickup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested when pickup reads the selected issue’s full content at runtime—specifically the issue body, comments, labels, and any “Agent Brief” comment authored by others in the issue tracker (e.g., GitHub issues/comments), which are outsider-authored.