fix-bug

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow starts by restating a bug report that the user or an issue supplies (description line 3, step 1 at line 10), which may be outsider-authored, but the skill names no monitored feed and the agent must be pointed at a specific report, so this is selected user-supplied content rather than forced delivery.