build

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required runtime path /build loads and reads the user-selected plan file .specs/plans/<slug>.md (or @path via /build @...) and then scans and implements unchecked items from that plan, so outsider-authored free text is ingested when the user supplies/chooses a slug or path.