gsd-ingest-docs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow “ingest-docs” (referenced in SKILL.md) ingests pre-existing planning documents from the repository (e.g., docs/adr/, docs/prd/, docs/specs/, root-level {ADR,PRD,SPEC,RFC}-*.md), which can include outsider-authored free text, and that text is then synthesized into the LLM context to generate/merge .planning/ outputs.