debug-program

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow for “Debug Program” reads the user-provided build context (step 1: check .superstack/build-context.md, and if missing it “gather[s] context from the user and write[s] .superstack/build-context.md”), meaning outsider-authored free text can be ingested into that file and then read by the workflow.