address-github-comments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The runtime workflow calls gh pr view --comments / gh pr comment ... --body which reads outsider-authored GitHub issue/PR review comment text (public/in-authenticated channel) and therefore would feed free-form outsider text into the agent context when the agent processes/uses those comments.