setup-pr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the required workflow is a GitHub Actions PR review that operates on pull request contents in the target repository (i.e., outsider-authored PR text submitted via GitHub).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The workflow explicitly "calls the OpenHands/extensions/plugins/pr-review composite action directly" which GitHub Actions will fetch and execute at runtime, so this external repository content will run as code during workflow execution (OpenHands/extensions/plugins/pr-review).