wayfinder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In SKILL.md, the runtime workflow is to load a trusted in-repo issue tracker “map” and then fetch/zoom the full body of specific child/related/closed tickets only after selecting and claiming a particular ticket, so outsider-authored free text is ingested only when the workflow actively targets that specific issue.