plan-design-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow ingests the plan document and local repo context at runtime (plan file plus CLAUDE.md/AGENTS.md/DESIGN.md/TODOS.md and branch diff via git/gh), which can be outsider-authored free text when the plan comes from a user/PR or repository content.