gds-retrospective

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow loads project markdown files as LLM context (e.g., persistent_facts includes file:{project-root}/**/project-context.md and Step 0.5 loads epic/story/architecture/GDD/PRD markdown from {planning_artifacts} / {implementation_artifacts}), which can include outsider-authored free text if those files were not authored by the operating user.