speckit-opsmill-implement

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads tasks.md end-to-end from the (user-selected) spec directory under specs/ and copies exact chunks verbatim into subagents, so outsider-authored free text can be ingested via submitted/queued repo content that the workflow monitors.