re-tool-wine-trace

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). At runtime the skill runs Wine with WINEDEBUG=+relay:... and then the agent reads/filters the resulting Wine debug logs from $SESSION_DIR/traces/relay-raw.log (which contain argument/return text derived from the target EXE’s execution, i.e., potentially attacker-controlled free text), so outsider-authored content can enter the LLM context via the produced trace markdown.