om-sync-merged-pr-issues

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Yes—at runtime the workflow runs list-prs and get-issue to fetch outsider-authored PR/issue titles, bodies, comments, and diffs, and then the agent uses that readable text to extract closingIssuesReferences/issue numbers and to decide what to comment/close (indirect prompt-injection risk via PR/issue content).