kata-review-pull-requests

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads local git diffs, local files, and runs gh pr view to inspect pull request diffs, which can contain outsider-submitted free text from untrusted PR contributors without prior agent selection.