review-roadmap

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow reads a thread-root roadmap.md from docs/threads/<...>/roadmap.md at runtime; that roadmap is outsider-authored content (not the operating user’s own text) and is ingested as readable prose into the agent’s LLM context for judgment.