lcx-contribute-bug-fix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow explicitly ingests the user's bug report (“Read the user's bug report and identify the affected surface” in SKILL.md step 1), so outsider-authored free text is consumed at runtime and could be used for indirect prompt injection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill runtime clones and uses remote GitHub repositories (e.g., git clone --depth=1 "https://github.com/$REPO"), which fetches third-party source that will be executed (tests/QA commands) and is therefore a runtime external dependency that can execute remote code.