ce-promote

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md Phase 1 uses a free-form description from the user arguments as the source of truth (and also reads PR title/body and diff/changelog), then Phase 3 drafts directly (Path B) or supplies that prompt to the Spiral CLI (Path A), so outsider-authored text can be ingested without selecting a specific item first.