task-to-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests the ticket “comments and linked context” (e.g., issue/ticket text authored by others) via the runtime “Read the ticket, its comments, and linked context” step, which can include outsider-authored free-form text into the agent’s LLM context.