pr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text can enter the LLM context via gh pr view ... --json title,body (PR title/description written by external contributors) and via gh api graphql ... reviewThreads ... comments ... body (review thread comment bodies authored by other users), both of which are readable text fetched at runtime.