codebase-cleanup-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/cleanup-snapshot/snapshot.mjs the runtime walks and reads all text/code files under the user-supplied --root (via inventory.mjs and function-scanner.mjs), meaning any outsider-authored files placed in that filesystem are ingested as free text at runtime without pre-selecting trusted items.