address-pr-comments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In “Address PR Comments”, the runtime workflow uses gh api --paginate to read PR review comments, issue comments, and review submission bodies (user-authored text) from GitHub before triaging them for fixes/replies, so outsider-authored free text is ingested from repos/{owner}/{repo}/pulls/{n}/comments, issues/{n}/comments, and pulls/{n}/reviews.