plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow reads existing feature spec.md (outsider-authored if the spec wasn’t authored by the operating user) and includes its free-text contents into the LLM context as it “Read[s] the active feature's spec.md …” before generating plan.md.