dev-task-loop

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes—Phase 2.1/2.10 requires opening tracker/task pages in the browser and then using javascript_tool to pull the ticket description/attachments text, which is outsider-authored free text (e.g., Jira/Linear/issue comments or other third-party tracker content).