visual-docs-team

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow reads outsider-authored free text from the host repository at runtime (e.g., README.md, AGENTS.md/CLAUDE.md, CONTEXT.md) during Phase 2 “Survey the repo and propose domain clusters,” and later uses that content to drive agent prompts.