code-reviewer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/pr_analyzer.py the workflow runs git diff/log against the provided repository (get_changed_files→get_file_diff→analyze_diff_for_risks plus analyze_commit_messages), ingesting outsider-authored PR contents (diff added lines and commit messages) as free text at runtime.