ce-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The project review docs workflow (references/project-docs.md, Drafting) reads recent merged pull requests and their review comments from the code host, and outsiders can post PR review comments that the workflow ingests without the agent selecting a specific item, so this is medium under the GitHub PR rule.