requesting-code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path dispatches a code-reviewer subagent using the user/workspace-provided git SHAs to read and review diffs (git changes) at build/review time, so outsider-authored free text can enter via submitted code/commit messages and be ingested for review.