explain-spsq

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow reads the user-supplied .spsq text (and accessible .spsc dependencies) into the agent’s context (“Read the entire .spsq” / “Follow and read… .spsc”), which is free-form authored content by an outsider relative to the operating user’s own prompts, creating an indirect prompt-injection surface.