review-wall-of-apps-prs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow is to list and inspect GitHub pull requests (outsider-authored PR diffs/files) and run make check-wall-of-apps on the PR head, which implies the agent will ingest PR content/diffs (free text/code) into its LLM context for review.