fetch-unresolved-comments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider-authored free text is ingested from GitHub PR review-thread comment body fields (and diffHunk) returned by the runtime GraphQL call in fetch_unresolved_comments() → client.graphql(...) → format_comments(...), where comment["body"] is placed into the LLM-visible JSON output.