github-comment-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider-authored free text is ingested when the runtime “Collect” step gathers open review threads and inline comments from GitHub (i.e., comments/issues authored by other users than the operating user) and then the agent uses that text to classify and generate replies.