scan-new-specs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime the workflow reads repo content from warpdotdev/warp and warpdotdev/warp-server by listing PRs and then fetching specs/<id>/PRODUCT.md to assess completeness, so an outsider who can author/merge a spec can inject free text into that README/spec file for the agent to ingest.