opencode-design-commands

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow allows running arbitrary shell commands via !cmd syntax (such as git logs or gh issue lists), which executes in the local repository and can ingest external text when interacting with untrusted repositories or commit history.