rhdh-overlay

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In workflows/triage-prs.md and scripts/triage-prs.py, the runtime reads outsider-authored free text from GitHub PRs by listing open PRs and ingesting their title, labels, and other PR metadata (including pr.get("title", "") which is used in output and parsing) from the overlay repository without first selecting a specific trusted item.