speckit-opsmill-extract

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill reads outsider-authored free text at runtime from user-selected spec directories—specifically full contents of specs/<spec-name>/** including research.md, spec.md, and files under contracts/, which can contain arbitrary text submitted by a provider user.