gitnexus-pr-swarm-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow instructs the agent to take a “PR URL or PR number” and then “review a GitNexus pull request,” which at runtime would necessarily ingest outsider-authored PR content (e.g., PR description/diffs/files) into LLM context via the GitNexus API/tooling used by the subagents.