gitnexus-pr-swarm-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow takes a user-supplied “PR URL or PR number”, then (per the orchestration spec) the adapter’s subagents read the PR’s body/diffs from GitNexus at runtime; that PR content is outsider-authored free text (by the PR author) and is ingested into the LLM context via the GitNexus API/browser retrieval path.