slice-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow dispatches an oracle reviewer that reads the generated review package file containing the full git diff (commit messages/stats/diff), which is outsider-authored text if an outsider can submit/modify the repo changes that the slice diff reflects.