gitnexus-pr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests outsider-authored free text from the PR via gh pr diff <number> (GitHub pull request diff content written by non-operating-user contributors), which is then fed into the agent’s LLM context through subsequent detect_changes/impact/context steps.