workflow-pr-doctor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow dispatches verification-feedback.md with producer=pr-state, which (per the automated review lifecycle) fetches PR review comments from GitHub/GitLab and quarantines the outsider-authored comment body as raw_input.{body} for later ingestion into the LLM context.