docs-drift-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow reads repository-authored documentation files (e.g., AGENTS.md and linked contributor/harness docs) from the PR’s owning repository, which are outsider-authored relative to the operating user’s organization, and those documents are then used as context for the LLM during the review.