spec-grill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text from the target repo is ingested at runtime via scripts/extract-signals.js reading README.md, spec/charter.md (and legacy CHARTER.md), spec/system-map.md, CLAUDE.md/AGENTS.md, plus other .md files and commit messages, then returning them as JSON/human report that the agent can place into its LLM context.