babysit-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text from GitHub PR review activity (issue comments, inline review comments, and review bodies) is fetched at runtime via gh api repos/{owner}/{repo}/issues/<pr>/comments, .../pulls/<pr>/comments, and .../pulls/<pr>/reviews, then ingested into the watcher snapshot as new_review_items[*].body and actions (via fetch_new_review_items → collect_snapshot → LLM context).