research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow only ingests first-party repository content (e.g., $setup-project scaffolding, backlog records, and docs/wiki guidance) and then performs controlled external research steps (opened URLs/docs/specs and registry version lookups), but it does not describe reading outsider-authored free text from an untrusted feed/queue where an outsider can submit arbitrary text without the workflow first selecting specific items.