om-auto-continue-pr-loop

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads PR bodies, issue comments, tracker state, and commit history via get-pr and comment-pr, which ingest outsider-submitted free text from public pull requests.