wayfinder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The workflow requires loading and then fetching the full body of related/closed tracker tickets on demand (SKILL.md “Work through the map” step 3/“Load the map” step 1), and those ticket bodies are authored by other people via the repo’s issue tracker API/UI, so outsider-authored free text can enter the agent’s LLM context.