review-pr-clickup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes: scripts/prefetch.sh fetches outsider-authored PR content (diff/metadata/comments) via gh pr diff/gh pr view/gh api and writes it as readable text into $WORKDIR/* (e.g., diff.txt, comments.json, inline_comments.json), which the agent then uses to generate the LLM review context.