code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The workflow can fetch outsider-authored issue tracker content (public/third-party issue text) via docs/agents/issue-tracker.md in step 2, and then includes that fetched spec/requirements text in the Spec sub-agent prompt (step 4), which is free-form text that can contain indirect prompt injection.