code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads issue tracker references from commit messages to fetch specs, which exposes the agent to outsider-authored issue text if the repository processes untrusted contributions.