om-auto-continue-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads PR bodies, descriptions, issue comments, review comments, and checks via operations like get-pr, list-issue-comments, and list-review-comments, allowing outsiders to submit untrusted text into monitored feeds.