gsd-add-phase

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime path is the add-phase workflow invoked with $gsd-add-phase, where the user-provided {{GSD_ARGS}} (free-form phase description) is parsed and then used to generate a slug and update STATE.md/roadmap text—this is outsider-authored free text entering the agent’s LLM context.