sprint-planning

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill’s runtime workflow ingests outsider-authored free text from the project’s README/CLAUDE.md and backlog/story-map files (e.g., product/**/backlog.md, product/**/story-map.md) via “Read the project README/CLAUDE.md” and “Read the backlog/story map,” which are not guaranteed to be authored by the operating user.