adk-bot-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests GitHub PR titles/bodies and then traces to issues (“From the PR…trace back to the issue and…item…from the PR title and body” and “Search closed issues and merged/rejected PRs across the repository”), so outsider-authored PR/issue text can be read at runtime.