openspec-apply-change

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required workflow ingests provider/outsider-authored free text via the outputs of openspec instructions apply --change "<name>" --json (notably context, operationGuidance, contextFiles, and task descriptions) and then reads every file path listed in contextFiles before implementing.