review-fix-signoff-loop

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow ingests outsider-authored free text when it runs “fresh-context signoff reviews” and “post the same report to the PR” by reading PR content via gh pr view / PR comment context, which includes issue/PR body text authored by non-operating users.