openspec-bulk-archive-change

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill reads openspec/changes/<name>/tasks.md and delta spec markdown files from the selected changes (local repo workspace content authored by other contributors), which can include outsider-authored free text that is ingested into the agent context during conflict resolution and status reporting.