flashlight

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md describes loading a “wayfinder map” and “open tickets” from an issue tracker (including question/type/blockers/assignee) and using the verbatim user as the child ticket question, but it does not indicate reading any outsider-authored free text from an external queue/feed at runtime without first selecting/targeting a specific ticket/map.