babysit-prs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source is GitHub PR contents: the runtime lists open PRs (gh pr list), then reads each PR’s review thread nodes and authors plus standing/delta state via GitHub GraphQL and CLI calls (gh api graphql / gh pr view / gh pr checks), which is outsider-authored free text (comments/review thread content) from arbitrary users.