harness-verify-before-move

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Step 7 (GitHub project sync) loads references/github-sync.md and then uses gh api/gh issue list/gh pr list to fetch milestone/issue/PR titles, labels, and other text from GitHub at runtime, which is outsider-authored free text (issue/PR content) that can be injected into the LLM context via the tool outputs.