afk-interactive-code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests outsider-authored free text from the PR/branch diff itself (e.g., git diff output and git grep matches over the feature branch), which reflects code/comments written by other contributors, and that diff text is then fed into the agent’s LLM context during step-by-step review.