github-code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the “Reviewing a Pull Request on GitHub” workflow, it fetches PR title/body and changed-file contents from the GitHub API (https://api.github.com/repos/$OWNER/$REPO/pulls/$PR_NUMBER and /files), which are outsider-authored free text from PR authors.