inbox-get-notification-details

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow uses gh api to fetch notification thread details and issue/PR comment bodies from GitHub at runtime (outsider-authored free text in comment bodies), which can be passed into the agent’s LLM context depending on how the tool output is consumed.