linear-discipline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source and runtime path: the always-on workflow makes Linear the default source of truth and, after Step 0 auth, uses Linear MCP to read existing issues/milestones/documents for tracking and audits—this ingests outsider-authored free text contained in Linear (e.g., issue titles/descriptions/comments), which an external user can submit.