retrospective

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow reads retrospective inputs from outsider-authored artifacts—specifically evaluation reports and other plan artifacts under docs/plans/* (Phase 1 step 2/4 in SKILL.md), whose authorship is not controlled by the operating user—then incorporates extracted evidence into the LLM’s reasoning context to generate proposals.