code-review-gate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). This workflow ingests the content of “each changed file” selected via git diff and then “read[s] the full file” to generate the review, so any outsider-authored text present in those repo files at runtime would be included in the LLM context (e.g., PR- or issue-supplied file bodies or forwarded/downstream code).