execute-refactor-item

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill ingests item_description/item_rationale as free-form text from the provided refactor item (an external party’s contribution in the typical workflow), which the agent then uses in its LLM context to plan and apply changes.