archive-spec

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The archive-spec workflow reads outsider-authored Markdown files within the selected <spec-root>/<slug> (e.g., task_NN.md listed in _tasks.md, qa/qa-report-*.md, and docs/specs/<slug>/references/_index.md) via repository file commands like grep, YAML parsing, and awk at runtime, without requiring a prior selection of a trusted item beyond the user-provided slug.