product-design-spec

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the product-design-spec skill’s required runtime workflow, outsider-authored text can be ingested via the input argument path/URL handling in Phase “Discover” where it reads an approved PRD or other sources (Jira/GitHub/URL/plain text), so an outsider can supply free text directly to be processed.