triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the workflow’s “Triage a specific issue or PR” step (including “Gather context”) instructs reading the full issue/PR body and comments (and PR diff), which are outsider-authored free text from the project issue/PR tracker; discovery and explicit selection can both lead to this reading.