git-push-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The workflow explicitly runs "gh pr view --json number,title,body" to read PR title/body from GitHub (user-generated, public content) and then preserves/edits that content with "gh pr edit", so untrusted third-party PR content is read and can materially influence the agent's actions.