tea-plan-issue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow only instructs using the tea CLI with a specific issue-id to fetch “issue information,” which indicates it reads external issue text only after the agent selects a particular item by ID rather than consuming arbitrary outsider-authored free text from a general feed/queue.