kspec-triage-inbox

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow’s runtime path ingests inbox item content (e.g., via kspec inbox list / kspec triage start / kspec triage record @ref ...), and inbox items are typically outsider-authored free text (comments/messages/issues) that the user did not author, which the agent then uses as LLM context for triage decisions.