pull-request-authoring

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow reads GitHub commit messages via list_commits on the head branch (and recent base-branch commits for convention), which can contain text from contributors other than the user, but an outsider cannot force delivery into these without a push or merge the workflow does not select.