product-frame

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow for product-frame is explicitly based on first-party, internal artifacts (codebase, PRDs/briefs, tickets, telemetry) and uses “web/search” only as an optional step in deep research about the problem shape, not as a direct ingestion of arbitrary outsider-authored text without first selecting internal evidence.