closeissue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text can enter the LLM context via GitHub issue/PR body content fetched at runtime (e.g., gh pr view --json ... ,body and gh issue view <N> --json ... ,title/labels/url), where the issue/PR text is authored by non-operating-user parties.