full-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow collects PR metadata, diffs, issue comments, review comments, and review discussions via gh pr view and gh api calls (scripts/collect_context.sh), ingesting outsider-submitted free text from pull requests and associated discussion feeds.