pr-reviewer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required workflow ingests the peer PR diff via gh pr diff <N>, and that diff is outsider-authored free text (code/commit content written by someone other than the operating user) which is then fed into the sub-reviewers and into the agent’s LLM context.