requesting-code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow dispatches a code-reviewer subagent using task-provided placeholders (e.g., {DESCRIPTION}, {PLAN_OR_REQUIREMENTS}, and a git diff between {BASE_SHA}..{HEAD_SHA}), which means outsider-authored free text could be passed in via the submitted task/context rather than only trusted first-party docs.