addressing-pr-review-comments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is ingested via the GitHub REST API call gh api repos/{owner}/{repo}/pulls/{number}/comments --paginate, where each inline review comment’s body (authored by other users) is read and then used to decide what to change and what to reply.