kiro-specs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Phase 2 "Research Phase" (references/phase-2-design.md) explicitly instructs the agent to "Use available resources (web search, documentation, MCP tools)" and "Summarize key findings with source links," which requires fetching and ingesting open/public web content that can directly inform design decisions and subsequent actions, exposing the agent to untrusted third-party material that could contain indirect prompt injections.