write-specs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Core Workflow step 1 explicitly requires the agent to "Read any linked docs, code, issues, PRs, diagrams, user notes, or product context before drafting," which instructs the agent to fetch and interpret externally linked (potentially public, user-generated) content that can influence subsequent spec decisions.