fix-what-i-pointed-at

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill reads UI feedback notes left by users, designers, or PMs in a running application via a session tool (reticle_session), which constitutes outsider-authored free text ingested into the agent workflow.