ns-sdd-living-spec-consolidator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow (“Ad-hoc” mode) ingests outsider-authored free text from {task_description} and the approved working-tree diff to map features/domains and then reads/writes {specs_root}/{domain}.md; since an outsider can provide that task description and submit a code-diff for review, they can influence the free text the agent consumes before selecting specific items.