draft-openspec-docs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads/writes a user-edited scratch plan inside the target docs page (i.e., outsider-authored text is the user’s edits to the page content that the agent drafts from), via the “iterate until the plan is approved” and “wait for the user to call a step ID. Draft exactly that step…” loop.