follow-graph-spec

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md step 4–5, the workflow runs npx graph-spec-cli graph ... --from <component-id> ... and “read[s] those specific concept files in full” from the user-supplied graphspec bundle path (<path>), so any outsider-authored text embedded in that bundle is ingested at runtime.