issue-driven-github-flow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow reads outsider-authored GitHub issue/PR comment text at runtime via gh issue view {N} --comments / gh pr view --comments, and that free-form markdown can include indirect prompt-injection content that the planning/review/code-review subagents ingest into their LLM context.