openspec-apply-change

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads and ingests contextFiles produced by openspec instructions apply --change "<name>" --json and then “Read every file path listed under contextFiles”, where those files come from the OpenSpec change artifacts selected by the user.