living-project-documentation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the runtime path of the bundled offline validators, scripts/docs.mjs:loadDocs() reads all ./docs/**.md files (including specs/, conventions/, operations/, decisions/) using fs.readFile, and the checks then process the resulting Markdown text (e.g., link extraction in extractLinks()), so an outsider who can author those files’ contents can inject free text into what the agent/validators ingest at runtime.