to-issues

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow ingests “conversation or fetched issue/PR from docs/agents/issue-tracker.md” and, in multi-session mode, “full issue decomposition → issues/*.md published to tracker,” meaning the agent may read outsider-authored issue/PR text (e.g., issue/PR body/comments) at runtime and include it in the LLM context.