implementation-planning

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow is to write/execute plans based on GitHub issue/epic text (“For GitHub issue bodies…”, “Lightweight register: the issue IS the plan”, “Check sibling documents… Open issues… in the same tracker”), which at runtime can include outsider-authored free-form issue/PR body content fed into the agent’s LLM context.