fix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md Step 2/3 and reference/fix-flow.md §3, the agent ingests free-text from the caller’s /fix directive/$ARGUMENTS to determine what target files to read and which edits to apply, then reads those repo files as context.