gh-review-requests

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime path uses GitHub CLI to fetch unread review_requested notifications and PR metadata (e.g., via gh api notifications --paginate and subsequent gh api repos/{repo}/pulls/...), which includes outsider-authored free text like PR titles/body and notification content from other users’ GitHub activity.