spec-checklist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md 的流程要求“扫描并提取 spec pack 文档中‘待确认/待澄清’的候选点”并将“原文片段”作为上下文使用，意味着运行时会读取（并把）outsider-authored spec pack 文档正文/占位符内容喂入 LLM；该文档是否由操作用户撰写并未保证。