openspec-sync-specs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow reads delta spec files from openspec/changes/<name>/specs/*/spec.md (outsider-authored free text if those files come from outside the operating user’s chosen inputs) and then ingests that markdown into the agent context to “understand the intended changes” before editing main specs.