planning-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The planning workflow ingests user-provided prompt text for routing/“shape” (e.g., selecting shape-requirements/diagnose-issue based on the question in step 1 and then shaping/validating the spec), so outsider free text is consumed at runtime without selecting a specific item first.