ifc-syntax-ifcxml

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow is described as parsing the user-provided IFC ifcXML document structure (e.g., locating the iso_10303_28 root and handling id/ref/href pointers), meaning outsider-authored free text comes from that input file and is ingested at runtime.