gds-test-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md Step 3 (“Load Persistent Facts”) instructs loading workflow.persistent_facts entries prefixed with file: (here file:{project-root}/**/project-context.md) into the LLM context as facts, and those files are authored by parties other than the operating user (outsider project documentation) at runtime.