create-spec

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). Phase 0 explicitly requires calling web_search and aws___read_documentation/aws___search_documentation to fetch public documentation and research findings that are documented and used to set constraints and guide design decisions, so untrusted third-party content from the web can materially influence the agent's workflow.