ae-generate-tracking-code

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Phase 0/Phase 1 ingests plan content from user-provided/app-configured AE project data (via ae-cli tracking plan fetch ... > .ae-cli/remote-plan.json and subsequent plan fields used for code generation), which is outsider-authored free text if an attacker can submit or influence plan content inside that project.