pr-review-canvas

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the workflow uses gh api repos/{owner}/{repo}/pulls/{number}, /pulls/{number}/files, and /pulls/{number}/comments to ingest outsider-authored GitHub PR text (PR title/body, file patches/diffs, and PR comments) and then renders/embeds that content into the generated HTML.