tylle-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow instructs the agent to run Trylle read commands like try repo context --json and try issue view/pr view --json, whose returned fields can include outsider-authored free text (e.g., issue/PR bodies, comments, CI log text) that the agent then uses in its LLM context for reasoning.