pr-code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow ingests PR description/body and changed file contents/diffs (including GitHub PR review threads on re-review) authored by the PR author/other contributors, which are outsider-authored free text that the agent places into the LLM context via the “PR description” and “Diff/Changed File Contents” passed to subagents.