closeout

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required workflow for /closeout, the runtime text it reads is PR metadata/body content fetched via gh pr view (including parsing the <!-- reviewed-at: ... --> marker), which is outsider-authored free text submitted to GitHub (e.g., PR body), making indirect prompt-injection exposure possible.