execute-linear-epic-with-codex

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). During the required “Review monitoring” workflow, the agent fetches GitHub PR comments and review content via gh pr view <number> --comments and gh api repos/{owner}/{repo}/pulls/<number>/comments, which can include outsider-authored free text.