codebase-reverse-spec

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow reads the target repository’s code/tests/README-like content (outsider-authored relative to the operating user) during Phases 1–2 via “Read relevant code” and “List the directory tree / identify entry points,” which becomes LLM-readable prose in the extraction log and final spec.