copilot-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests pull request discussion text by running gh pr view <number> --json reviews,reviewThreads,comments and then filtering/bucketing it, meaning outsider-authored PR comments/threads are initially read by the agent at runtime before being discarded if the author is not in the allowed set.