omh-verification-gate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow reads GitHub PR status and CI data (gh pr view <n> --json statusCheckRollup, gh api ruleset and branch-protection reads) and records CI job output as observed evidence, and an external contributor can influence that PR's check output without the agent selecting a specific item.