pr-swarm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source is GitHub PR metadata fetched at runtime via the required workflow’s Phase 1/2/6 gh pr view, gh pr checks, and gh api graphql/review scans (including review body text), which is outsider-authored content that the agent consumes before it “selects” any trusted item beyond the PR number(s).