arc-pr-review-loop

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). At runtime the workflow resolves the PR via gh pr view ... --json title,body,... and gh pr diff, ingesting outsider-authored PR body/content and diff text (public GitHub data supplied by non-operating-user authors) into the LLM context for the review round.