create-durable-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The “Create Durable Plan” skill’s runtime path only performs read-only repo research and writes first-party plan files under plans/**, and while it may fetch “official docs URLs” during evidence gathering it is not described as ingesting outsider-authored free text from user-controlled queues/feeds at runtime (only into the plan via the user’s request and repo contents).