project-develop-copilot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md routes user-provided natural language into a project lifecycle router that may treat user-supplied PRD/log/URL/text as “source material” for ingest/import and then reads it via the required lifecycle gates (e.g., Context Recovery/External Bridge leading into project-ingest/session-context-import), so outsider-authored free text can be ingested at runtime without selecting a specific trusted item first.