pr-to-go-linter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The workflow explicitly requires reading a user-specified pull request’s diff/metadata (“Read the PR diff and extract the repeated pattern”), and that PR content is authored by outsiders to the operating user, which would be ingested as readable text into the agent’s LLM context during step 2.