hns-workflow-ci-loop

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source: GitHub PR checks/failure logs are ingested at runtime via the required watch/poll loop gh pr checks <PR> ... and the handoff includes failedChecks[].logUrl for later log fetching, where the outsider-authored content originates from the PR’s commit diffs and CI log text (externally submitted via PR creation/changes).