bug-history-retrieval

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md’s required workflow explicitly queries canonical systems (internal defect/issue trackers, incident systems, release notes, git history) and then extracts/collates their record text into the agent’s outputs, which at runtime can include outsider-authored free-form content from those systems (e.g., ticket descriptions, incident narratives, PR/commit/issue discussion text).