om-merge-buddy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow reads open pull requests, check runs, issue comments, and run logs from a git tracker (e.g. GitHub) using operations like list-prs, get-pr-checks, list-issue-comments, and list-runs, which ingest outsider-authored free text from PR bodies, comments, and CI logs without prior selection.