gsd-research-phase

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs research using "WebSearch, Context7 queries, source verification" and the quality gate requires verifying claims with "official docs" and multiple external domains, and the spawned gsd-phase-researcher agent's outputs (informed by those external sources) are used prescriptively by plan-phase—therefore the agent is expected to fetch and act on untrusted public web content.