code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow for publish uses scripts/pr-context.sh --publish, which ingests GitHub pull request bodies/titles and pending review/draft comment bodies plus unresolved review thread comment bodies (outsider-authored free text) into the agent for reconciliation.