gh-review-requests

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow runs a GitHub CLI script that reads GitHub account data at runtime—specifically unread notifications filtered by reason=="review_requested", then calls repos/{repo}/pulls/{number} and repos/{repo}/pulls/{number}/requested_reviewers, where PR titles/URLs/author logins and team reviewer data are derived from outsider-authored PR content.