adopt

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow reads existing project artifacts from the operating user’s workspace (e.g., production/stage.txt, design/gdd/*.md, docs/architecture/adr-*.md, production/epics/**/*.md, .agents/docs/technical-preferences.md) and uses their contents for format auditing, which is outsider-authored free text if those files were not authored by the operating user.