github-pr-description

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the workflow “Analyze Changes” the agent ingests commit messages and diffs from the current Git working branch via git log origin/main..HEAD, git diff origin/main..HEAD --stat, and git diff origin/main..HEAD, which are user-authored outsider text submitted through Git commits/PR content.