deployless-ai-pr-governance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow is to inspect and triage existing PRs/issues/labels/templates in the repo (e.g., PR bodies, issue text, templates, and other repo-authored artifacts), which at runtime can include outsider-authored free text from other contributors/PR authors via the platform APIs; that text is then used to drive the agent’s LLM context for governance decisions.