create-pull-request-with-reviewers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow ingests outsider-authored free text from the local git repository’s history/diffs (e.g., git log main..HEAD --oneline and git diff main...HEAD in Steps 6–7), which can include commit messages and file contents authored by other contributors, and those strings are then used to generate the PR title/description that is fed into the agent’s LLM context.