prd

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow instructs the agent to read existing requirements (requirement_list, requirement_get), search items (pms_search), and read SPMS project data via MCP tools (project_get), which can contain outsider-submitted titles, descriptions, and acceptance criteria in collaborative project management environments.