code-retro

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required git-evidence subagent reads PR comments and review findings through gh pr view/PR reads, and any outsider who can comment on or review a PR can place free text there without the agent selecting a specific item, so this is medium under the GitHub PR reading rule.