heyeddi-ci-respond

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, fetch_pr_comments calls gh api repos/{repo}/pulls/{pr}/comments and gh pr view ... --json {comments,reviews}, writes the returned PR comment body text into .heyeddi/docs/pr-<N>-ci-comments.json (wrapped as <<<UNTRUSTED_EXTERNAL_CONTENT>>>), and later pipeline steps ingest that cached free text for filtering and reply generation.