triage-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider-authored free text is ingested via gh pr view <num> --json title,body,... (PR title/body written by external contributors) and via gh api repos/{owner}/{repo}/pulls/{num}/comments, .../reviews, and the GraphQL reviewThreads...comments...body fields (review comments authored by non-operating users), which are then processed as “full text” in Step 3.