inspect-architecture-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required flows read the project's own code, dependency facts, plan files, and a ticket or brief the user designates, which is a selected item rather than a monitored outsider-writable feed, so outsider text can reach the agent only if someone points it at a specific external item.