sweeper-fix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests outsider-authored GitHub issue text and PR-related content via gh api fetching the public sweeper review record (which is external content) and gh issue view fetching the live issue from microsoft/vscode, and it also consumes the maintainer-provided “INLINE spec” copy prompt when present.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill runtime explicitly runs gh api "repos/egamma/vscodesweeper-state/contents/records/microsoft/vscode/items/<issue-number>.md?ref=state" to fetch a review record whose "Fix prompt" content is then used to drive the agent's actions, so the fetched URL (repos/egamma/vscodesweeper-state/contents/records/microsoft/vscode/items/.md?ref=state) directly controls prompts at runtime.