triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The triage workflow explicitly runs gh issue list and gh issue view to ingest inbound GitHub Issue titles, bodies, and comments into the agent's context without prior item selection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The repository references a community-owned GitHub repository (pbakaus/agent-reviews) at runtime to fetch and execute a CLI review tool, establishing a common/reputable unofficial operational dependency.