clarify

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow ingests only the user-provided “target” (e.g., repo, diff, plans, beads/work items) via the Clarify review chain (Frame → Code Review → Defuzz → etc.), which is organizer/user-authored free text at runtime rather than first-party trusted provider documentation.