optimize-codebase

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required runtime path scripts/_skill_protocol_runtime.py executes the manifest-defined run command, which calls scripts/seal_optimization.py --draft {input.draft} and reads the attacker-provided handoff draft file content via args.draft.read_text(); that free text is then parsed/validated by scripts/check_optimization.py and optimization_contract.