app-spec-packager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's core workflow (SKILL.md step 3: "Research current facts ... Put citations and source notes in REFERENCES.md") explicitly requires fetching and using external public third‑party sources to inform the specification, so untrusted web content can be ingested and materially influence decisions and next actions.