042-planning-openspec

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In /create-spec issue mode the workflow resolves an outsider-authored issue by ingesting its readable description plus every accessible paginated comment via authenticated, read-only tracker tooling, and then uses that untrusted prose as input requirements for scope assessment/artifact authoring.