merge-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). Outsider free text is pulled from the PR’s open review comments via gh api "repos/$REPO/pulls/$PR_NUMBER/comments" in Step 2; those comments are authored by other users (not the operating user) and can be ingested into the agent’s LLM context when the tool output is processed.