rick-fix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow reads REPORT_PATH (a markdown file under docs/rick/.../review/current.md) and ingests the finding “issue” and “fix suggestion” cells as LLM-readable text to decide and to populate {ISSUE}/{FIX_SUGGESTION} for the sub-agent; since that report content is authored by the “rick-review council” (an outsider relative to the operating user), this is outsider-authored free text entering the agent context via the report parsing step.