bb-checklist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow reads outsider-authored free text from FEATURE_DIR files (e.g., spec.md/plan.md/tasks.md) at runtime, and those documents are not guaranteed to be authored by the operating user, so their contents can be ingested into the LLM context via the “Load feature context” step.