refactor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In --auto mode, the skill scans repository files (“Scan repo for candidate files (code + doc)” and then reads/classifies each candidate), so an outsider who can submit poison into the repo would have their free-text content ingested by the required workflow.