pr-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required step 2 gh pr list fetches titles, labels, reviews and file lists of all open PRs in the repo, and step 5 reads PR comments and reviews, so outsiders who can open PRs or comment on them get text into the workflow without the agent selecting a specific item.