migrate-memory

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md:25-28 and SKILL.md:33-34 require reading outsider-authored workspace files (e.g., groups/<folder>/CLAUDE.local.md and memory/index.md/memory/memories/*) and then distilling/integrating their readable text into the agent’s LLM context, which can include free-form content from parties other than the operator.