vibe-requirements-spec

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill workflow instructs the agent to read external evidence via paths or URLs (Gather evidence and Source and Configuration Boundaries), but since the agent must actively fetch or select specific sources rather than having outsider text automatically injected into a monitored feed, the risk level is low.