firstsun-harness

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow reads and ingests the target repository’s existing harness files as readable text (e.g., AGENTS.md/progress.md/feature_list.json/archive markdown) via scripts/lib/harness-utils.mjs for scoring/reporting, which are outsider-authored when the user points the skill at a third-party repo.