recipe-front-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow reads design documents from docs/design/ and passes their (outsider-authored) contents to subagents like acceptance-test-generator and work-planner via runtime prompt strings that include “[path]” data, creating indirect prompt-injection exposure.