hyfdev-rolldown-pr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow includes fetching and reading the PR patch/diff and related materials (“full patch (gh pr diff <number>, or git show…)”, “Read … the originating issue … linked discussions”) which are authored by outsiders and become LLM-readable prose, creating an indirect prompt-injection pathway.