check

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The review runtime workflow can ingest outsider authored free text because it reads changed files and spec content from the repository working tree, and in practice those file contents include text submitted by the user authoring the diff (via PR or commit).