linear-backlog

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow explicitly reads each selected Linear issue’s full source (including description/acceptance criteria/links) at runtime and feeds it into the agent/child via the $task lane prompt, so outsider-authored free text from other users in Linear is ingested.