release-train-runner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Stage 01 and stage 03 invoke gh pr view $PR --json ... ,body and then read/parse conflicting files during git merge, so outsider-authored PR titles/bodies and file contents are ingested into the LLM via the remote repo worker/task context as part of validation/integration.