review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is fetched at runtime from external sources (Linear/GitHub issue bodies or an arbitrary user-supplied plan/spec path) in Step 1c and loaded into .claude/plans/${SLUG}/reviews/.requirements-input.md, whose contents are then passed as REQUIREMENTS_TEXT into the phx:requirements-verifier agent context.