gds-create-story

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow loads outsider-authored project files (e.g., **/project-context.md, planning_artifacts/*epic*.md, *gdd*.md, *architecture*.md, *ux*.md, and sprint-status.yaml) via the “discover inputs” protocol and then embeds their readable contents into the agent’s LLM context as {project_context}, {epics_content}, {gdd_content}, {architecture_content}, {ux_content}, and {sprint_status}.