cookbook-review-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads outsider-authored free text via GitHub PR fields (e.g., gh pr view <N> ... --json title,body,files,... and gh pr diff <N> ... --repo sgl-project/sglang), so a PR author can supply arbitrary text that the agent consumes before/while running the checklist.