vibe-to-speckit-superpowers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Skill.md describes a required Step 1 “Discovery (vibe-browser-audit + runtime-observer)” but does not specify any outsider-authored free-text input source (e.g., email/chat/tickets/issue bodies) that the runtime workflow ingests without selecting specific items.