ce-commit-push-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can enter the LLM context via runtime GitHub CLI calls that fetch PR/commit metadata and diffs (e.g., gh pr view ... --json ... and gh pr diff <ref> in PR mode / Step Pre-A), where the PR title/body/commit messages and diff content are authored by non-operating users.