design-md-validator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests user-provided DESIGN.md content locally, and also supports a “From URL (fetch first)” path where outsider-authored markdown at an arbitrary URL is downloaded and then passed to npx @google/design.md lint for parsing and linting.