pr-report

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow explicitly instructs the agent to “Gather… contributor intent if it is documented in PR text or design docs” (i.e., outsider-authored PR/issue text) and to use it to frame the review, which would be ingested as free-form prose into the LLM context at runtime.