challenging-change-specs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill instructs the agent to read project rules, change artifacts, related code, existing tests, and execution evidence, which can include user/outsider-submitted change specs and code containing untrusted free text.