spec-orchestrate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In references/phases/intake.md (auto mode) the orchestrator runs gh issue view <N> --json title,body,labels and then passes the fetched Issue title/body into the spec-generator planner input, which is free-text authored by the GitHub Issue creator and is consumed at runtime without first selecting a specific item beyond the attacker-chosen --issue N.