openspec-archive

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests outsider-authored free text from repository change artifacts at runtime (e.g., it reads proposal.md, design.md, and tasks.md from changeRoot, which are written/controlled by the user/PR authors, then uses that text to generate the PR summary and archive summary).