create-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow uses gh pr view / gh api to fetch PR reviews and issue/pull request comment bodies from GitHub (outsider-authored text by other users) and prints them into the agent’s context via the script outputs (e.g., poll-pr.sh → gh api .../issues/$pr/comments and /pulls/$pr/comments, and triage-pr.sh → gh api .../reviews and comment bodies).