code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The orchestrator fans out to external reviewers by passing a self-contained prompt that includes read access to repo files like tmp/review/<feature>/changes.diff and code_review/<feature>/scope.md, which may contain outsider-authored text if the user supplies a PR/standard or diff containing freeform content.