software-planner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Pre-Development "Step 1: Domain Research" and rules/pre-development.md explicitly require searching and downloading content from public sources (Google Scholar, CNKI, IEEE, ACM, arXiv, GitHub) and extracting core concepts, so the agent would fetch and interpret untrusted third-party/user-generated content that can materially influence design and subsequent actions.