monitor-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text from GitHub PR review comments/threads (Copilot review bodies) is fetched at runtime via gh api/GraphQL in scripts/wait-for-copilot-review.mts and then printed to stdout; the agent reads that terminal output with get_terminal_output and includes the body text in its LLM context.