reviewing-api-spec

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required runtime input is the outsider-authored api-spec document itself (the reviewer reads the “finished api-spec doc end to end” in Step 1), so any free-text authored by someone other than the operating user becomes LLM-readable context.