checkout

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). [Exclusion: The workflow only checks out the user-provided ref and (optionally in Codex) uses gh pr view --json title to fetch the associated PR title, then renames the task; it does not ingest arbitrary PR/issue body text or other outsider-authored free text beyond a single trusted field (the title).]