regression-suite

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md requires reading multiple outsider-authored markdown files at runtime—e.g., production/qa/bugs/*.md (closed/fixed bug descriptions) and design/gdd/systems-index.md plus per-system GDD files—then uses their extracted free text (acceptance criteria, edge cases, fix descriptions) to generate the report/manifest in the LLM context.