prd-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow for “plan the X PRD” fetches the tracker issue body verbatim and uses it as LLM prompt input, so any outsider-authored issue body text (e.g., from other contributors) can become free-form prompt content via the tracker’s API/browser-readable text path.