migrate-required-input-dependency

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow instructs reading a how-to guide from a local checkout or a public URL (“Phase 1, read that guide … from the URL above”), so at runtime the agent may ingest outsider-authored free text fetched from GitHub into the LLM context.