ff15-workspace-operation-customization

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The validator/runtime workflow reads and parses workspace-authored YAML and referenced facet files directly from user-controlled paths (.ff15/operations/<file>.yaml and instruction.file/output_contracts.report[].format.file), so an outsider authoring those files can inject arbitrary free text into the LLM-bound instruction content.