redesign

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). This required workflow only ingests first-party/tenant-controlled files and trusted internal skill references (e.g., ui-craft and references/craft-intent.md, plus an optional .ui-craft/brief.md) and runs a detector on a user-supplied path/url without any step that reads arbitrary outsider-authored free text from a queue/feed or third-party submission.