make-pr-easy-to-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads a target PR’s commits/diff/description based on a user-provided PR URL (via “Resolve the target PR … from the user-provided URL or current branch” and then “Inspect commits, diff size… and PR description”), so outsider-authored PR text can be ingested.