08-work-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow is to “read the assignment materials” and “load the proposer profile” (SKILL.md:26-28), which at runtime would typically include outsider-authored free text such as ToR/deliverables/milestones from external parties, and that text would be ingested into the agent’s LLM context to draft the work plan.