murmur-review-loop

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The agent reads outsider-authored review comments and notes via respira_list_review_comments and respira_get_review_comment without prior selection, exposing the workflow to indirect prompt injection from anyone who opens the review link.