sdd-draft-spec

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow reads “approved proposal or direct SDD behavior interview” and “read discoverable proposal/spec context first,” which implies ingesting outsider-authored free-form proposal/interview text into the agent’s LLM context at runtime.