ce-work

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required multi-PR delivery path reads open and merged GitHub PR titles and descriptions to match group markers (Plan group: lines and branch names), and any outsider can open a PR on a public repo, so this is GitHub PR reading the workflow consumes without selecting a specific item; the rest of the bundled script was truncated and not assessed.