proj-work

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md requires reading spec.md and tasks.md for an existing work item (EXECUTION mode), and those markdown files are authored outside the current runtime session by prior users (outsider text), which is then ingested into the agent’s LLM context to perform the “verify DONE claims” checks.