team-lead

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow instructs the agent to enumerate open GitHub pull requests and read their changed files (gh api and gh pr diff), which allows external contributors to inject arbitrary untrusted text into the agent's runtime context.