spec-to-code-compliance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s workflow ingests user-provided specification documents/whitepapers and codebase at runtime (specs via “PHASE 0–2 Documentation Discovery/Spec corpus extraction” and code via “PHASE 3 Code Behavior IR”), so outsider-authored free text can be submitted as the “spec” corpus for analysis.