requirement-refine

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow instructs the agent to capture raw user requirements from any provided source (such as tickets, emails, transcripts, or uploaded files) and store them in references/ without sanitizing or isolating the text before incorporating it into downstream SRS generation.