code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The workflow can fetch outsider-authored issue tracker content at runtime (step 2.1: “fetch via the workflow in docs/agents/issue-tracker.md”), and that fetched free-text spec/issue body is then inserted into the Spec sub-agent prompt (step 4. Spec sub-agent prompt includes “the path or fetched contents of the spec”).